Input validation vulnerability in Cookie Monster 1.51

The Cookie Monster plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This means that, in versions up to and including 1.51, someone with administrator-level access or above can inject malicious web scripts into pages which will then be executed when a user visits that page. Unfortunately, this vulnerability only affects multi-site installations and installations where the security feature ‘unfiltered_html’ has been disabled.