Input validation vulnerability in Event Registration Calendar By vcita 1.4.0

The plugin called “Event Registration Calendar By vcita” for WordPress has a security issue where it can be easily attacked by malicious users. This can happen if the plugin is used in versions 1.4.0 or lower. The problem is that the plugin does not properly protect against dangerous code being added to its shortcodes, which are used to customize the plugin. This means that attackers with a certain level of access can add their own harmful code to pages that use the plugin, which will then run whenever someone visits that page.