Input validation vulnerability in Quick Restaurant Menu 2.0.0

The Quick Restaurant Menu plugin for WordPress is vulnerable to a type of cyber attack for versions up to and including 2.0.0. This type of attack, called Stored Cross-Site Scripting, is possible because of inadequate security measures that do not properly check incoming data and protect against malicious scripts. If the attack is successful, an attacker with a low level of access to the website (like a subscriber) can inject malicious scripts into pages that will run each time a user views the page.