Input validation vulnerability in WWM Social Share On Image Hover 2.2

The WWM Social Share On Image Hover plugin for WordPress is vulnerable to a type of attack called Cross-Site Scripting. This type of attack happens when attackers with administrator-level access inject malicious code into web pages. When any user visits the page, the malicious code can be executed. This type of attack only affects multi-site installations and installations where extra security measures have been put in place to prevent it. Versions of the plugin up to and including 2.2 are vulnerable to this attack.