The plugin does not escape the op_edit POST parameter before outputting it back in multiple Game Option pages, leading to Reflected Cross-Site Scripting issues
Affected pages: op=engines, op=perspectives, op=modes, op=genres, op=themes, op=platforms