Input validation vulnerability in HostFact bestelformulier integratie 1.1

The HostFact ordering form integration plugin for WordPress is at risk for a type of hack called Stored Cross-Site Scripting. This can happen through the plugin’s ‘ordering form’ shortcut in versions 1.1 and below. The plugin does not properly clean up or protect against potentially harmful information that users input. This means that someone who has contributor-level access or higher can add harmful code to a page, and it will run whenever someone visits that page.