Input validation vulnerability in SEO by 10Web 1.2.6

The SEO By 10Web plugin for WordPress is vulnerable to a type of cyber attack called Stored Cross-Site Scripting. This type of attack is possible in versions of the plugin up to and including 1.2.6, due to a lack of protection against malicious code. This means that users with administrator-level permissions and higher can inject malicious web scripts into pages, which will then execute whenever a user views those pages. This vulnerability only affects WordPress installations that are part of a multi-site network, or are using a plugin that has disabled a feature called unfiltered_html.