Input validation vulnerability in Coupon Tab for DirectoryPress (pp-coupon-tab) 0.2.0

The Coupon Tab for DirectoryPress plugin for WordPress is vulnerable to a type of attack called Reflected Cross-Site Scripting. This vulnerability exists in versions up to and including 0.2.0. It allows an unauthenticated attacker to inject malicious code into webpages, which can execute if a user clicks on a link or performs another action. To do this, the attacker must be able to exploit certain parameters in the plugin, such as cfh, cc, cb, cd, ce, cdt, cdet, cs, cfw, and surl. This vulnerability could have been avoided by properly sanitizing the input and escaping the output.