Input validation vulnerability in CM Search And Replace – Optimize content edits with a powerful search and replace tool 1.5.2

The plugin called “CM On Demand Search And Replace” for WordPress has a security issue called “Stored Cross-Site Scripting” which can affect versions up to 1.5.2. This is because it does not properly clean up or protect against malicious code. As a result, hackers with high-level access can insert harmful code into pages that will run whenever someone opens that page. This only affects certain types of installations.