Input validation vulnerability in Seed Fonts 2.3.1

The Seed Fonts plugin for WordPress is vulnerable to a type of cyber attack called Stored Cross-Site Scripting. This type of attack can occur if someone with administrator-level permissions and above uses the plugin’s settings in version 2.3.1 without enough safeguards. This can allow malicious scripts to be injected into pages that will be executed when a user visits the page. This type of attack only affects websites that have multi-site installations and those that have disabled the ability to use unfiltered HTML.