Input validation vulnerability in Branda – White Label WordPress, Custom Login Page Customizer 3.4.8.1

The Branda plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack can allow an attacker with administrator-level permissions to inject malicious code into web pages. This code will execute whenever an unsuspecting user visits one of these infected pages. This vulnerability affects WordPress versions up to and including 3.4.8.1, however it only affects multi-site installations or installations where a certain security feature has been disabled.