Input validation vulnerability in Social Metrics 2.2

The Social Metrics plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack can only be done by someone with administrator-level permissions and higher. It is possible for an attacker to insert scripts into web pages which will be executed whenever a user accesses the page. This vulnerability affects multi-site installations and installations where unfiltered_html has been disabled. However, this vulnerability has been fixed in version 2.2 of the Social Metrics plugin.