Input validation vulnerability in Slimstat Analytics 5.0.8

The Slimstat Analytics plugin for WordPress is vulnerable to a type of cyber attack called “Stored Cross-Site Scripting” in versions up to and including 5.0.8. This type of attack can happen when an attacker with administrator-level access injects malicious code into pages on the website. If users access these pages, the malicious code will execute. This type of attack only affects multi-site installations and websites where the “unfiltered_html” feature has been disabled.