Stored XSS via unescaped slideshow timing settings

Stored XSS in Stefan Boonstra Slideshow 2.3.1 and earlier allows remote authenticated users to execute script through slideshow defaults. The plugin stores administrator-supplied slide timing values without sanitization, then outputs them without escaping when a slideshow is created or edited. Administrator access to general settings is required; the injected script executes in the browser of a user who creates or edits a slideshow.