Input validation vulnerability in All 404 Redirect to Homepage 2.0

The All 404 Redirect to Homepage & Broken images Redirection plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack allows malicious actors, who have administrator-level permissions or higher, to inject arbitrary web scripts into pages. When a user visits one of these pages, the malicious script will execute. This vulnerability affects all versions up to and including 2.0, due to a lack of proper input sanitization and output escaping.