Input validation vulnerability in Auto Location for WP Job Manager via Google 1.0

The Auto Location for WP Job Manager via Google plugin for WordPress is vulnerable to a type of hacking attack, called Stored Cross-Site Scripting, in versions up to and including 1.0. This vulnerability can be exploited by attackers who have been granted administrator-level permissions. If successful, the attacker can inject malicious web scripts into pages that will execute whenever a user visits them. This vulnerability only affects multi-site installations and installations where a specific setting, called unfiltered_html, has been disabled.