Input validation vulnerability in ND Shortcodes 6.9

The ND Shortcodes plugin for WordPress is vulnerable to a security issue. An attacker with contributor-level permissions or higher could use the plugin’s ‘nd_options_testimonial’ shortcode to inject malicious webscripts into pages. These scripts would execute whenever someone visits an infected page. To protect yourself, make sure you have the most up-to-date version of the plugin (6.9 or later).