Input validation vulnerability in Google +1 by BestWebSoft 1.3.4

The BestWebSoft plugin for WordPress, called Google +1, is vulnerable to a type of attack called Reflected Cross Site Scripting (XSS) if you are using a version of the plugin older than 1.3.4. This means that an attacker can inject malicious code into pages that will be executed if the user clicks on a link provided by the attacker. This happens because the plugin does not adequately sanitize inputs or escape outputs.