Input validation vulnerability in Open User Map 1.3.25

The Open User Map | Everybody can add locations plugin for WordPress could be vulnerable to malicious activities in certain versions up to and including 1.3.25. If an attacker with administrator-level access was able to gain access, they could inject arbitrary web scripts into pages that will execute every time a user visits an injected page. This vulnerability only affects multi-site installations and installations where unfiltered_html has been disabled.