Input validation vulnerability in Advanced Custom Fields: Extended 0.8.9.3

The Advanced Custom Fields: Extended plugin for WordPress has a security flaw that could make it vulnerable to malicious attacks. This vulnerability occurs in versions up to and including 0.8.9.3 and occurs when a user with contributor-level or higher permissions adds code to a page through the ‘acfe_form’ shortcode. This code could be malicious and would execute when any user visits the injected page, allowing the attacker to take control of the page.