Input validation vulnerability in PCRecruiter Extensions 1.4.10

The PCRecruiter Extensions plugin for WordPress has a security issue called Stored Cross-Site Scripting. This means that hackers can insert harmful code into the plugin’s ‘PCRecruiter’ feature, which could affect all versions up to and including 1.4.10. This can happen because the plugin doesn’t properly check and protect user-provided information. As a result, attackers with at least contributor-level access can add their own code to pages that will run when someone visits that page.