Input validation vulnerability in WP Booking Calendar 10.6

The WP Booking Calendar plugin for WordPress has a security issue that could allow hackers to insert harmful code into certain pages. This can happen if the website administrator has not properly filtered and protected the input and output settings. This vulnerability only affects websites with multiple installations or with certain restrictions in place. Additionally, if site administrators have given lower-level users access to manage the plugin’s settings, those users could also be affected.