Input validation vulnerability in Ecommerce – Two Factor Authentication   1.0.5

The Ecommerce – Two Factor Authentication plugin for WordPress is vulnerable to a security issue called Reflected Cross-Site Scripting. This means that in versions up to, and including, 1.0.4, an unauthenticated attacker could inject malicious code into web pages. This code would then be executed if the user performs an action such as clicking on a link. This occurs because the plugin does not properly sanitize user input or properly escape output.