Input validation vulnerability in WP-dTree 4.4.5

The WP-dTree plugin for WordPress has a security issue in some versions that can allow unauthenticated attackers to inject malicious web scripts into pages. This security issue exists in versions up to and including 4.4.5 and is caused by the plugin not properly sanitizing user input or escaping output. If an attacker is able to inject malicious web scripts into a page, those web scripts will execute every time someone accesses the page.