Input validation vulnerability in Debug Bar ElasticPress 2.1.0

The Debug Bar ElasticPress plugin for WordPress is vulnerable to a security issue called Cross-Site Scripting. This is when attackers can inject their own malicious code into pages on a website. This issue exists in versions of the plugin up to and including version 2.1.0 and is due to a lack of input validation and output sanitization. This means that whenever someone visits an affected page, the malicious code can be executed.