Input validation vulnerability in WPComplete 2.9.5

The WPComplete plugin for WordPress has a security flaw that affects versions up to and including 2.9.4. This flaw makes it possible for someone to inject malicious web scripts on pages that appear on the WordPress website. A malicious user can do this if they can get another user to click on a link they provide. This is possible because the WPComplete plugin does not properly check the input it gets or prevent this type of malicious code from being entered.