Input validation vulnerability in Complete Open Graph 3.4.5

The Complete Open Graph plugin for WordPress is vulnerable to a type of cyber attack called Stored Cross-Site Scripting. This type of attack is possible in versions up to and including 3.4.5 of the plugin, because the plugin does not do enough to protect the data that goes through it. If someone with administrator-level access to the plugin tries to inject a malicious web script, it will execute every time a user visits the page. This vulnerability only affects multi-site installations and installations where a safety measure called unfiltered_html has been disabled.