Input validation vulnerability in Automatic Youtube Video Posts Plugin 5.2.2

The Automatic Youtube Video Posts Plugin for WordPress is vulnerable to a type of security risk called Stored Cross-Site Scripting. This means that an attacker with administrator-level permissions could inject malicious web scripts into pages of a WordPress website. These scripts would then execute each time a user views the affected page. This security risk affects all versions of the plugin up to and including 5.2.2, and only applies to multi-site installations or installations where a certain security feature (unfiltered_html) has been disabled.