Input validation vulnerability in authLdap 2.5.8

The AuthLdap plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack happens when an attacker with administrator-level access to the plugin’s settings can inject malicious web scripts into pages. When any user visits the injected page, the malicious code will execute. This attack only affects multi-site installations and installations where the Unfiltered HTML setting has been disabled. This vulnerability exists in all versions of the plugin up to, and including, version 2.5.9.