Input validation vulnerability in WooSidebars 1.4.1

The WooSidebars plugin for WordPress is vulnerable to a security issue, up to version 1.4.1. Unauthenticated attackers could inject malicious web scripts into pages if they can convince a user to perform an action such as clicking on a link. This is due to a lack of sanitization and output escaping of the URL, and the use of remove_query_arg. Although the security issue is recorded as an Open Redirect, it is actually related to Cross-Site Scripting.