Input validation vulnerability in GuruWalk Affiliates 1.0.0

The GuruWalk Affiliates plugin for WordPress is vulnerable to a type of security issue called Stored Cross-Site Scripting. This means that if you have versions up to and including 1.0.0 of the plugin installed, someone with administrator-level access to your WordPress site could inject malicious code that will execute whenever a user visits the injected page. This only affects multi-site installations and installations where a specific security setting (unfiltered_html) has been disabled.