Input validation vulnerability in Widget Settings Importer/Exporter 1.5.3

The Widget Settings Importer/Exporter Plugin for WordPress is vulnerable to a form of malicious attack called Stored Cross-Site Scripting. This type of attack happens when a hacker is able to inject malicious code into a website that will then run whenever someone visits the website. The vulnerability affects versions of the plugin up to 1.5.3 and occurs because the plugin does not properly sanitize and escape user input, allowing hackers with subscriber-level permissions and above to inject malicious code into pages.