Input validation vulnerability in Very Simple Google Maps 2.9

The Very Simple Google Maps plugin for WordPress can be exploited by attackers with contributor privileges or higher, allowing them to inject malicious code into web pages. This code will be executed each time a user visits the affected page. The plugin is vulnerable to this type of attack in all versions up to 2.9, because it does not properly filter user input or escape output.