Input validation vulnerability in Trackserver 5.0.2

The Trackserver plugin on WordPress has a security issue that can allow malicious code to be inserted into the plugin’s ‘tsmap’ feature. This can happen in all versions up to 5.0.2 because the plugin does not properly clean and protect user input. This means that someone with contributor-level access or higher can add harmful scripts to pages that will run whenever someone views that page.