Input validation vulnerability in WP LESS to CSS 1.0

The WP LESS to CSS plugin for WordPress is vulnerable to a type of cyber attack known as Stored Cross-Site Scripting in versions up to 1.0. This type of attack can be used by an attacker with administrative level permissions to inject malicious code into pages on the website. This malicious code can then be executed by any user who visits the page. This vulnerability only affects WordPress websites with multiple sites and sites where HTML filtering has been disabled.