Input validation vulnerability in User Roles 1.0

The User Role plugin for WordPress has a security issue called Stored Cross-Site Scripting. This can occur in versions 1.0 and below because the plugin does not properly clean and protect the information it receives and displays. This vulnerability allows attackers who have administrator-level access or higher to insert harmful code into pages. This code will then run whenever a user views the affected page. This only affects websites with multiple sites or if the “unfiltered_html” feature is turned off.