Input validation vulnerability in Pinterest RSS Widget 2.3.1

The Pinterest RSS Widget plugin for WordPress is vulnerable to a security issue called Stored Cross-Site Scripting. This is when a malicious user can inject malicious code into a page which can cause harm when another user accesses that page. This vulnerability affects versions of the plugin up to and including 2.3.1. Contributors or users with higher levels of access can inject this code into a page.