Input validation vulnerability in Advanced Custom Fields 6.3.6.2

The plugins Advanced Custom Fields and Secure Custom Fields for WordPress have a security vulnerability that allows attackers to inject harmful scripts into pages. This can only happen if the attacker has administrator-level access and the website is a multi-site installation or has disabled a security feature called unfiltered_html. To fix this issue, it is important to update to the latest version of ACF. Please refer to the provided instructions for how to do this. It is also important to note that only the minified files in Secure Custom Fields have been fixed, so the original source files may still be vulnerable.