Input validation vulnerability in StreamWeasels Kick Integration 1.1.1

The plugin called “StreamWeasels Kick Integration” for WordPress has a security issue. This problem, known as Stored Cross-Site Scripting, can be exploited through the plugin’s “sw-kick-embed” feature. This vulnerability exists in all versions of the plugin up to version 1.1.1. The issue is caused by not properly filtering and protecting information entered by users. This means that someone with contributor-level access or higher can add harmful code to a page. When a user visits that page, the code will run and potentially cause damage.