Input validation vulnerability in Buttons Shortcode and Widget 1.16

The Buttons plugin for WordPress has a security issue that allows hackers to insert harmful scripts into web pages using the plugin’s shortcuts. This can happen on any version of the plugin, including the most recent one. This problem occurs because the plugin does not properly check and protect against malicious code from being added by users with certain permissions. This means that anyone who has contributor-level or higher access can add dangerous scripts to a page, which will then run whenever someone visits that page.