Input validation vulnerability in Tiny Carousel Horizontal Slider 8.1

The Tiny Carousel Horizontal Slider plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack can be used by someone with administrator-level access to inject malicious code into pages that can then be seen by anyone who visits that page. In this case, the vulnerability only affects WordPress websites that are multi-site installations, or have disabled a certain security feature known as “unfiltered_html”. Versions of the plugin up to and including 8.1 are vulnerable.