Input validation vulnerability in Zotpress 7.3.4

The Zotpress plugin for WordPress, used up to version 7.3.4, has a security issue that could allow unauthenticated attackers to inject malicious code into pages users see. This is due to a problem with how the plugin handles certain inputs and outputs, which might be possible to exploit on certain web server configurations such as Apache+modPHP. If a user clicks on a link crafted by the attacker, the malicious code might be executed.