Input validation vulnerability in Options for Twenty Seventeen 2.5.0

The Options for Twenty Seventeen plugin for WordPress is vulnerable to a security issue in versions up to, and including, 2.5.0. This vulnerability allows an attacker with contributor-level permissions and above to insert malicious code into webpages that could be executed when a user views the page. This malicious code is inserted through a feature called ‘social-links’ shortcode, which was not properly secured against malicious code.