Input validation vulnerability in Shariff Wrapper 4.6.9

The Shariff Wrapper plugin for WordPress has a security vulnerability that allows attackers to insert malicious scripts through the ‘shariff’ shortcode. This can happen if the attacker has contributor or higher level permissions. It is caused by not properly sanitizing and escaping user input attributes such as ‘info_text’. This means that when a user clicks on the information icon on a page, the malicious script will be executed.