Input validation vulnerability in Twitter Bootstrap Slider 1.1.3

The Twitter Bootstrap Slider plugin for WordPress can be vulnerable to Stored Cross-Site Scripting when used with certain settings. This type of attack occurs when malicious code is stored in a web page, which then runs on a user’s computer whenever that page is accessed. If an attacker with administrative privileges injects web scripts, then those scripts will be executed when any user visits the page. This vulnerability only affects multi-site installations and installations where a certain security feature has been disabled.