Input validation vulnerability in Custom Field Template 2.5.9

The Custom Field Template plugin for WordPress is vulnerable to a type of cyber attack called Reflected Cross-Site Scripting. This type of attack involves injecting malicious code into a website to make it execute if someone clicks on a link. Versions of the plugin up to 2.5.9 are affected because there are not enough measures in place to properly protect against this type of attack.