Input validation vulnerability in weebotLite 1.0.0

The WeebotLite plugin for WordPress is vulnerable to a type of malicious code known as Stored Cross-Site Scripting. This type of malicious code can be injected into webpages, and will automatically run whenever someone views that webpage. The vulnerability exists in all versions of WeebotLite up to and including version 1.0.0, because it does not properly check user-submitted input for malicious code, and does not properly secure webpages against it. The vulnerability only affects WordPress websites that are running a multi-site installation, or have disabled a security feature called “unfiltered_html”.