Input validation vulnerability in Easypromos Plugin 1.3.8

The Easypromos plugin for WordPress is at risk for a type of cyber attack called Stored Cross-Site Scripting. This can happen when a user adds a code to the Easypromos shortcode, which is a feature of the plugin. The problem is that the plugin does not properly check and protect the code, so it can be used by a hacker to insert harmful scripts into pages. This can affect any version of the plugin up to version 1.3.8. If an attacker with at least contributor-level access uses this vulnerability, they can add their own malicious code to a page that will run whenever a user visits that page.