Input validation vulnerability in Wp-Adv-Quiz 1.0.3

The Wp-Adv-Quiz plugin for WordPress is at risk of having malicious code inserted through the title of a quiz. This vulnerability exists in all versions up to and including 1.0.3 because the plugin does not properly clean and protect user input. As a result, attackers who have administrator-level access or higher can add harmful scripts to pages that will run whenever someone views the affected page. This only affects WordPress installations with multiple sites or with the “unfiltered_html” setting disabled.