Input validation vulnerability in Easy SVG Allow 1.0

The Easy SVG Allow plugin for WordPress is vulnerable to a security issue called Stored Cross-Site Scripting. This security issue could allow someone with author-level access and above to inject malicious code into pages on a WordPress website. This malicious code would execute every time someone views the page. All versions of Easy SVG Allow, up to and including 1.0, have this security flaw due to the plugin not properly sanitizing and escaping input.