Input validation vulnerability in Exchange Rates 1.2.5

The Exchange Rates plugin for WordPress has a security issue that makes it vulnerable to a type of attack called Stored Cross-Site Scripting. This can happen in versions 1.2.5 and below because the plugin doesn’t properly clean and protect the information it receives and displays. This means that someone who has the ability to log into the website and has contributor-level access or higher, can insert harmful code into a page that will run whenever someone visits that page.