Input validation vulnerability in Who Hit The Page – Hit Counter 1.4.14.3

The Who Hit The Page – Hit Counter plugin for WordPress may have a security vulnerability that could allow attackers to inject malicious web scripts into web pages. This could occur if a user visits a page that has been injected with the malicious code. The vulnerability affects versions up to, and including, 1.4.14.3 of the plugin. The problem is due to the plugin not properly cleaning user input, and not properly escaping output.