Input validation vulnerability in Twitter Bootstrap Collapse aka Accordian Shortcode 1.0

The Twitter Bootstrap Collapse plugin, also known as the Accordian Shortcode plugin, for WordPress is at risk for a type of hacking called Stored Cross-Site Scripting. This can happen in all versions of the plugin, including version 1.0, because the plugin does not properly clean up or secure user-provided information. This means that attackers who are logged in and have access to contributor-level permissions or higher, can add dangerous web scripts to pages that will run whenever someone views that page.