Input validation vulnerability in SmokeSignal 1.2.7

The Smoke Signal plugin for WordPress, used in versions prior to 1.2.7, has a security vulnerability. This means that if someone with a low level of privilege was to gain access, they could inject malicious web scripts into certain pages. When visited by a user, these pages would then execute the malicious scripts, allowing the attacker to gain access to user data or other sensitive information. To protect yourself, make sure to update to the latest version of the plugin.