Input validation vulnerability in Kindeditor For WordPress 1.3.7

The Kindeditor For WordPress plugin for WordPress is vulnerable to a security issue called Reflected Cross-Site Scripting. This means that if someone can get a user to do something like click on a link, they can inject malicious code into the page. The vulnerability affects versions of the plugin up to and including 1.3.7, because it does not properly check for unsafe input or protect against malicious code.