Input validation vulnerability in AMP for WP – Accelerated Mobile Pages 1.0.88.1

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to a type of cyber attack called “Stored Cross-Site Scripting”. This type of attack happens when an attacker with certain levels of access to the plugin can inject malicious web scripts into WordPress pages that will be executed every time someone visits the page. All versions of the plugin up to and including version 1.0.88.1 are vulnerable to this type of attack due to inadequate protection against malicious input and output.