Input validation vulnerability in Modal Dialog 3.5.9

The Modal Dialog plugin for WordPress has a security vulnerability in versions 3.5.9 and lower. This vulnerability could allow someone with certain permissions (such as an administrator) to inject malicious code into web pages. This code would then be executed whenever someone visits the page. The vulnerability only affects websites with multi-site installations or installations with the “”unfiltered_html”” setting disabled.