Input validation vulnerability in Zenon Lite 1.9

The Zenon Lite theme for WordPress has a security issue known as Stored Cross-Site Scripting. This means that the theme’s Button feature can be exploited if someone adds a specific ‘url’ parameter. This vulnerability exists in all versions of the theme up to version 1.9. The problem is caused by not properly cleaning up the input and output of the code. This allows attackers with Contributor-level or higher access to add harmful web scripts to pages, which will run whenever someone visits that page.