Input validation vulnerability in CookieCode 2.4.4

The CookieCode plugin for WordPress has a security issue that could allow unauthorized access to websites using the plugin. This vulnerability affects versions up to and including 2.4.4, and is caused by a lack of proper protection against malicious code. This means that attackers who have administrator-level access or higher could potentially inject harmful web scripts into pages, which would then run whenever someone visits the affected page. However, this only affects websites with multiple installations and those that have disabled the “unfiltered_html” feature.