Input validation vulnerability in Sermon'e – Sermons Online 1.0.0

The Sermon’e – Sermons Online plugin for WordPress is vulnerable to a security issue called Reflected Cross-Site Scripting. This issue can be exploited by unauthenticated attackers who can trick users into clicking on a malicious link. If the link is clicked, it could allow the attackers to inject arbitrary web scripts into pages which would then execute. Versions of the plugin up to and including 1.0.0 are vulnerable because of inadequate input sanitation and output escaping.