WordPress Group Documents Plugin <= 1.2.1 - Stored Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability, because “Display name” and “Description” fields are not escaped. Solution Update the plugin...