The Live Scores for SportsPress plugin for WordPress has a security vulnerability that can be exploited by unauthenticated attackers. If they are able to get a user to click on a link, they can inject malicious web scripts into the page. This vulnerability affects all versions up to and including 1.9.0, due to the plugin not properly sanitizing the input it receives or properly escaping the output it produces.