Input validation vulnerability in Simple Tableau Viz 2.0

The Simple Tableau Viz plugin for WordPress has a security issue where malicious code can be injected through the ‘tableau’ shortcode. This problem exists in all versions up to 2.0 and is caused by not properly filtering user input and output. This means that attackers with contributor-level access or higher can insert harmful code into pages that will run when someone visits the page.