Input validation vulnerability in WP Booking Calendar 10.6.2

The WP Booking Calendar tool used for WordPress has a security flaw where hackers can insert harmful code through the admin settings. This can only happen if the attacker has high-level access and is logged in as an administrator. If successful, the code will run whenever someone visits the affected page. This issue only affects websites with multiple installations and those that have restricted certain types of code.