Input validation vulnerability in Memberlite Shortcodes 1.3.9

The Memberlite Shortcodes plugin for WordPress is vulnerable to an attack which allows malicious code to be stored and then executed when someone views a page created with the plugin. This attack affects version 1.3.8 and earlier and is due to the plugin not properly checking the input and preventing the malicious code from being inserted. This means that users with contributor level access and above can inject malicious web scripts into pages which will execute when any user views the page.