Input validation vulnerability in Passster – Password Protect Pages and Content 4.2.18

The Passster plugin used in WordPress is at risk for a type of cyber attack called Stored Cross-Site Scripting. This can happen in versions up to 4.2.18 because the plugin does not properly filter and protect the information it receives and sends out. This means that someone who has contributor-level access or higher can insert harmful scripts into web pages that will run whenever a user visits those pages.