Input validation vulnerability in Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More 2.6.1

The Content Control plugin for WordPress has a security issue known as Stored Cross-Site Scripting, which affects versions up to 2.6.1. This means that the plugin does not properly clean or protect against harmful code, allowing attackers with contributor-level access or higher to add their own malicious code to pages. When a user visits the affected page, the injected code will be executed.