Input validation vulnerability in eBecas 3.1.3

The eBecas plugin for WordPress is vulnerable to a type of attack known as Stored Cross-Site Scripting (also known as XSS). This vulnerability exists in versions of the plugin up to and including 3.1.3, and it occurs because the plugin does not properly prevent malicious code from being inserted into the settings. This makes it possible for attackers with administrator-level access or higher to inject malicious web scripts into pages, which will be executed whenever those pages are accessed. This vulnerability only affects multi-site installations and installations that have disabled the “unfiltered_html” setting.