Input validation vulnerability in Advanced Category and Custom Taxonomy Image 1.0.9

The plugin called “Advanced Category and Custom Taxonomy Image” for WordPress has a security vulnerability. This vulnerability, known as Stored Cross-Site Scripting, can be exploited through the plugin’s “ad_tax_image” shortcode. It affects all versions up to 1.0.9 and is caused by not properly filtering and securing user input. This means that attackers who are logged in as contributors or higher can insert harmful code into pages that will run whenever someone views that page.