Input validation vulnerability in HelloAsso 1.1.5

The HelloAsso plugin for WordPress has a security issue called Stored Cross-Site Scripting. This problem affects all versions of the plugin, including version 1.1.5. The reason for this vulnerability is that the plugin does not properly clean and filter user input, making it possible for attackers who are logged in and have contributor-level or higher access to inject harmful code into web pages. This code will then be executed whenever a user visits the affected page.