Input validation vulnerability in Twitter Bootstrap Collapse aka Accordian Shortcode 1.0

A plugin called “Twitter Bootstrap Collapse” used for WordPress has a security issue. This problem, called Stored Cross-Site Scripting, affects versions 1.0 and below. This issue happens because the plugin does not properly clean up or protect user input. This means that someone with contributor-level access or higher can add harmful code to a page, which will run when someone visits the page.