Input validation vulnerability in WP-EMail 2.69.1

The WP-EMail plugin for WordPress was found to have a security issue that affects version 2.69.0 and lower. This issue is called Stored Cross-Site Scripting and it affects users with administrator-level permissions or higher. It could allow a malicious user to inject web scripts into pages that will run automatically when other users view them. This only affects WordPress installations that are part of a multi-site network or have disabled the unfiltered_html setting.