Input validation vulnerability in Event Tickets with Ticket Scanner 1.5.5

The Event Tickets with Ticket Scanner plugin for WordPress has a vulnerability that allows people with minimal permissions, such as a subscriber, to inject malicious code into pages. This malicious code can run whenever a user accesses the page, and is present in versions up to and including 1.5.4. The vulnerability is due to the lack of proper security measures taken when saving data through the ‘sasoEventtickets_executeAdminSettings’ AJAX action.