Input validation vulnerability in Editorial Calendar 3.7.12

The Editorial Calendar plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This means that attackers with contributor-level permissions or higher can inject malicious web scripts into WordPress pages. Once injected, these malicious scripts will then be executed whenever someone visits an affected page. This vulnerability affects versions of the plugin up to and including 3.7.12 because they did not properly secure their inputs and outputs.