Input validation vulnerability in Web Accessibility By accessiBe 1.15

The Web Accessibility By accessiBe plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack is possible in versions up to and including 1.15 due to a lack of security measures that would normally prevent this type of attack. If an attacker has administrator-level permissions and above, they could inject malicious web scripts onto pages. Whenever a user visits an injected page, the malicious scripts will execute. This type of attack only affects multi-site installations and installations where a security feature called unfiltered_html has been disabled.