Input validation vulnerability in Client Dash 2.2.1

The Client Dash plugin for WordPress is vulnerable to a type of cyber attack known as Stored Cross-Site Scripting, which can occur in versions of the plugin up to and including 2.2.1. This type of attack can be carried out by someone with administrator-level permissions, allowing them to insert malicious web scripts on pages that will be executed when a user accesses these pages. This vulnerability only affects multi-site installations of WordPress and those where unfiltered_html has been disabled. It is possible that this vulnerability is similar to another one known as CVE-2019-17071.