Input validation vulnerability in WP Abstracts 2.6.2

The WP Abstracts plugin for WordPress is vulnerable to a type of malicious attack, known as Stored Cross-Site Scripting, in versions up to and including 2.6.2. This type of attack is possible because the plugin does not properly check and filter the data it receives, or protect it when it is displayed. This means that an attacker, who has administrator-level access, could inject malicious web scripts into pages. These scripts would then run whenever a user views one of these pages. This vulnerability only affects multi-site installations and installations where a certain security setting, called unfiltered_html, has been disabled.