Input validation vulnerability in Wishlist 1.0.43

The Wishlist plugin for WordPress has a security issue that can put your website at risk. This vulnerability, known as Stored Cross-Site Scripting, allows attackers with contributor-level access or higher to insert harmful web scripts into your website’s pages. This can happen because the plugin does not properly clean up or protect against user-submitted attributes. As a result, whenever a user opens an affected page, the injected web scripts will run.