Input validation vulnerability in BSK PDF Manager 3.4.1

The BSK PDF Manager plugin for WordPress is vulnerable to a type of security exploit called Stored Cross-Site Scripting. This type of exploit can be executed by an attacker who has Contributor-level or higher permissions on a WordPress website. It is possible for the attacker to inject malicious code into a page which will be executed when an unsuspecting user visits the page. This vulnerability affects all versions of the BSK PDF Manager plugin up to and including version 3.4.1. The issue is caused by inadequate sanitization of user-submitted data and insufficient output escaping.