Input validation vulnerability in 3DVieweronline 2.2.2

The plugin called 3DVieweronline for WordPress has a security issue where malicious code can be injected through a feature called ‘3Dvo-model’ shortcode. This can happen because the plugin does not properly clean or filter the information that users enter. As a result, attackers who have contributor or higher level access can add dangerous scripts to pages that will run when someone views those pages.