Input validation vulnerability in Gestion-Pymes 1.5.6

The Gestion-Pymes plugin for WordPress has a security vulnerability in versions up to, and including, 1.5.6. This vulnerability allows attackers with administrator-level access or higher to inject malicious scripts into pages that will be executed whenever a user visits the page. This only affects websites using multi-site installations or that have disabled the “unfiltered_html” feature. The vulnerability is caused by inadequate sanitization and escaping of user input.