Input validation vulnerability in Page Takeover 1.1.6

The Page Takeover plugin for WordPress can be attacked by hackers through a vulnerability called Stored Cross-Site Scripting. This can happen in versions 1.1.6 and below, because the plugin does not properly clean or protect the information it receives and shows. This means that people who have permission to change and control the website, known as administrators, can add harmful code to pages that will run whenever someone visits those pages. This issue only affects websites with multiple pages or websites that have a security measure called unfiltered_html turned off.