Input validation vulnerability in Popup Like box – Page Plugin 3.5.2

The Popup Like box – Page Plugin for WordPress is vulnerable to a type of security issue called Reflected Cross-Site Scripting in versions up to and including 3.5.2. This means that someone with bad intentions could potentially inject malicious code into pages of the plugin if they can get someone to click on a link they’ve created. The vulnerability exists due to inadequate sanitization of user input and lack of proper escaping of output.