Input validation vulnerability in raindrops 1.600

The WordPress theme “raindrops” has a security issue that allows for a type of attack called Stored Cross-Site Scripting. This affects all versions up to and including 1.600. This is because the theme does not properly clean or filter user input and attributes. As a result, attackers with contributor-level access or higher can insert harmful code into pages that will run when a user visits that page.