Input validation vulnerability in WPtouch 3.7.6

The WPtouch plugin for WordPress is vulnerable to a type of cyber-attack called Cross-Site Scripting in versions up to, and including, 3.7.5.3. This happens because the plugin does not properly check and filter the information it receives from online sources, nor does it properly escape information that it sends back to the user. This makes it possible for attackers to inject malicious code into the webpages, which then execute in the browser of anyone who visits the affected page.