Input validation vulnerability in Software License Manager 4.4.9

The Software License Manager plugin for WordPress is vulnerable to a type of cyber security attack known as Stored Cross-Site Scripting. This attack is possible in versions up to and including 4.4.9 of the plugin because of a lack of proper input validation and output escaping. An authenticated attacker with administrative privileges could use this vulnerability to inject malicious web scripts into pages which would execute when a user visits the page. This vulnerability only affects multi-site WordPress installations and installations where the feature “unfiltered_html” has been disabled.