Input validation vulnerability in Stock market charts from finviz 1.0

The Stock Market Charts plugin for WordPress websites is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack can occur if the plugin is in versions 1.0 or earlier. It would allow someone with administrator-level permissions or higher to inject malicious code into web pages that would execute when a user visits the page. This vulnerability only affects multi-site installations or installations with a setting called unfiltered_html disabled.