Input validation vulnerability in ST Categories Widget 1.0.0

The ST Categories Widget plugin for WordPress has a security vulnerability that allows hackers to inject harmful code into pages. This can happen when a user with contributor-level access or higher uses the plugin’s st-categories shortcode. This is because the plugin does not properly clean and protect information provided by users. This code can then be executed whenever someone views the affected page.