Input validation vulnerability in JetTricks 1.5.4.1

The JetTricks add-on for WordPress has a security issue where hackers can inject malicious code into web pages. This can happen if they have contributor-level access or higher. The vulnerability exists in versions up to 1.5.4.1 because the plugin doesn’t properly clean up user input. This means that when a user visits a page with the injected code, it will run without their knowledge or consent.