Input validation vulnerability in Bootstrap Shortcodes 3.4.0

The BootStrap Shortcodes plugin for WordPress is vulnerable to a type of malicious code attack. An attacker with the permission to edit posts, such as a contributor, can inject code into pages that will be executed when a user visits the page. Although it is easy to add event attributes to the tag generated by this plugin, it is unlikely that the attacker can exploit this vulnerability.