Input validation vulnerability in ImagePress – Image Gallery 1.2.2

The ImagePress – Image Gallery plugin for WordPress has a security issue that allows attackers to insert harmful web scripts into pages, which will be executed when someone visits the page. This vulnerability affects all versions up to 1.2.2 and can only be exploited by authenticated attackers with administrator-level permissions. The issue only affects multi-site installations and those with unfiltered_html disabled.