Input validation vulnerability in Ibtana – Ecommerce Product Addons 0.2.3

The Ibtana – Ecommerce Product Addons plugin for WordPress has a security vulnerability which allows unauthenticated attackers to inject malicious code into webpages. This vulnerability affects versions up to and including 0.2.3, and is caused by the plugin not properly filtering and protecting input data or properly escaping output data. If a user is tricked into clicking on a malicious link, the malicious code can be executed.