Input validation vulnerability in Institutions Directory 1.3.3

The WordPress plugin called Institutions Directory is currently at risk of being attacked by a type of cyber attack called Reflected Cross-Site Scripting. This can happen in all versions up to and including 1.3.3 because the plugin does not properly check and filter the information that users input, and it also does not properly protect against harmful scripts being displayed on the page. This means that someone who is not logged in or authenticated can potentially insert dangerous web scripts on a page if they can trick a user into clicking on a link.