Input validation vulnerability in Simply Excerpts 1.4

The Simply Excerpts plugin for WordPress, up to version 1.4, is vulnerable to a type of cyber attack called Stored Cross-Site Scripting. This type of attack is possible if the security settings of the WordPress installation are not properly configured. For example, if the installation is a multi-site or if the “unfiltered_html” setting is disabled. If the security settings are not configured correctly, then attackers with administrator-level permissions or higher can inject malicious web scripts into pages. This malicious code will execute every time a user visits the page.