Input validation vulnerability in WP-TopBar 3.0.5

The WP-TopBar plugin for WordPress has a security flaw that allows unauthenticated attackers to inject dangerous web scripts into pages. This happens if they can get a user to perform an action such as clicking on a link. This is due to a vulnerable version of ZeroClipboard being included in versions of WP-TopBar up to and including 3.04. This happens because there is not enough input sanitization and output escaping to protect against this type of attack.