Input validation vulnerability in Email Address Security by WebEmailProtector 3.3.6

The Email Address Security feature in the WebEmailProtector plugin for WordPress has a security issue called Stored Cross-Site Scripting. This vulnerability is present in versions up to and including 3.3.6 because the plugin does not properly clean up and protect against harmful code. This allows hackers who are logged in with subscriber-level permissions or higher to insert their own code into a webpage, which will run every time someone visits that page.