Input validation vulnerability in Fotomoto 1.2.8

The Fotomoto plugin for WordPress is vulnerable to a security issue called Reflected Cross-Site Scripting. This means that versions of the plugin up to and including 1.2.8 are not secure enough to protect against people who may try to inject malicious code into pages using links. If someone can trick a user into clicking on one of these links, then the malicious code will be executed.