Input validation vulnerability in Highlight Sitewide Notice, Text, Button Menu 2.0.2

The Highlight plugin for WordPress has a security issue that can allow hackers to insert harmful code onto a website. This can happen on versions 2.0.2 and below because the plugin does not properly clean and protect the information it receives from users. This vulnerability only affects websites with multiple installations and those that have disabled a security feature called “unfiltered_html.”