Input validation vulnerability in SlideShare for WordPress by Yoast 1.9.1

The SlideShare for WordPress by Yoast plugin is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack is possible when an attacker with administrative level capabilities is able to inject malicious web scripts into pages. When a user accesses an injected page, the malicious web scripts will execute. Up to and including version 1.9.1, the SlideShare for WordPress by Yoast plugin was not properly protecting against this type of attack due to not enough input sanitization and output escaping.