Input validation vulnerability in Bellows Accordion Menu 1.4.2

The Bellows Accordion Menu plugin for WordPress is vulnerable to a type of cyber attack called Stored Cross-Site Scripting. This type of attack can be used to inject malicious code into webpages. Versions of this plugin up to and including version 1.4.2 are especially vulnerable due to a lack of safeguards to detect and prevent this type of attack. If successful, an attacker with contributor-level permissions or higher could inject malicious code into webpages and execute the code whenever a user visits the page.