Input validation vulnerability in WP Login Box 2.0.2

The WP Login Box plugin for WordPress has a security vulnerability that can allow attackers who have administrator-level permissions to put malicious code on webpages. This only affects websites using WordPress that have more than one site and have disabled the unfiltered_html feature. The vulnerability exists in versions up to and including 2.0.2 and is caused by not properly checking input or providing enough protection for data output.