Input validation vulnerability in WP Matterport Shortcode 2.1.4

The WP Matterport Shortcode plugin for WordPress is vulnerable to a security risk called Stored Cross-Site Scripting. This security risk could be exploited by an attacker who has access to a WordPress account with Contributor-level permissions and above. If exploited, this security risk would allow the attacker to inject code into pages that execute when someone visits the page. Versions of the WP Matterport Shortcode plugin up to and including 2.1.4 are vulnerable to this security risk due to a lack of safeguards preventing malicious user input and output.