Input validation vulnerability in SpiderVPlayer 1.5.22

The SpiderVPlayer plugin for WordPress is vulnerable to a security issue known as Stored Cross-Site Scripting. This security issue affects all versions of the plugin up to and including 1.5.22. It is caused by the plugin not properly checking for and blocking malicious code when people with admin-level permissions are making changes in the settings. This malicious code can be injected into pages and will run each time a user visits the page. This security issue only affects multi-site installations and installations that have disabled a feature called unfiltered_html.