Input validation vulnerability in Pull This 1.1

The Pull This plugin for WordPress has a security issue called Stored Cross-Site Scripting. This means that in versions 1.1 and below, the plugin does not properly clean or filter the information it receives and sends out. This can allow attackers who are already logged in and have contributor-level access or higher to insert harmful code into pages. This code will then run whenever a user visits the affected page.