Input validation vulnerability in iframe Wrapper 0.1.1

A plugin called iframe Wrapper for WordPress has a security issue. This means that it can be vulnerable to a type of attack called Stored Cross-Site Scripting. This can happen in versions up to and including 0.1.1 because the plugin doesn’t properly clean or protect the information that is put into it. This could allow someone who is logged in and has at least contributor-level access to insert harmful website code into pages. This code would run whenever someone views the page that the code was inserted into.