Input validation vulnerability in Email posts to subscribers 6.2

The Email Posts to Subscribers plugin for WordPress is vulnerable to a security issue for versions up to, and including, 6.2. This issue could allow malicious attackers, who have administrator-level access, to insert malicious web scripts into pages. When a user accesses an injected page, the malicious script will execute. This security issue only affects multi-site installations and installations where the “unfiltered_html” feature has been disabled.