Input validation vulnerability in WP Roles at Registration 0.23

The WP Roles at Registration plugin for WordPress can be exploited by attackers with administrator-level permissions to add malicious code to certain webpages. This code will then be executed when a user visits the webpage. This vulnerability affects multi-site installations and installations where the ability to post unfiltered HTML has been disabled. The vulnerability has been present in all versions up to and including 0.23 of the plugin.