Input validation vulnerability in Featured Posts by BestWebSoft 1.0.1

The Featured Posts by BestWebSoft plugin for WordPress had a security issue in versions before 1.0.1 that allowed an unauthenticated attacker to inject malicious web scripts into pages. This was caused by the plugin not properly sanitizing and escaping user input, specifically the ‘category’ parameter. If a malicious link was clicked, the scripts would be executed. To protect against this, users should ensure they are using version 1.0.1 or later of the plugin.