Input validation vulnerability in BP Group Documents 1.2

The BP Group Documents plugin for WordPress has a security vulnerability that allows malicious attackers with administrator access to inject web scripts into pages. This means that when a user visits an injected page, the malicious code will be executed. This vulnerability affects all versions of the plugin up to and including version 1.2, as it does not properly sanitize input or escape output.