Input validation vulnerability in Hotjar 1.0.15

The Hotjar plugin for WordPress, up to and including version 1.0.15, has a security vulnerability that could allow attackers with administrator-level permissions or higher to inject malicious scripts into webpages. These malicious scripts would be executed when someone visits the webpage containing the malicious code. This only affects WordPress websites with multiple sites or websites where a certain security setting has been disabled.