Input validation vulnerability in Schedule Posts Calendar 5.2

The Schedule Posts Calendar plugin for WordPress has a security vulnerability in versions up to and including 5.2. This vulnerability can be exploited by attackers with administrator-level permissions or higher, allowing them to inject malicious web scripts into pages. These scripts will be executed whenever a user visits the page. This vulnerability only affects multi-site installations and those where the feature called “unfiltered_html” is disabled.