Input validation vulnerability in Network Publisher 5.0.1

The Network Publisher plugin for WordPress is vulnerable to a type of security attack called Cross-Site Scripting. This attack can occur in versions up to and including 5.0.1 due to the fact that it does not properly protect itself from malicious input or prevent malicious scripts from running. If exploited, this vulnerability allows attackers to inject harmful scripts into a victim’s browser, which can cause harm to the user.