Input validation vulnerability in Ocean Extra 2.4.8

The plugin called “Ocean Extra” for WordPress has a security issue that allows for a type of cyber attack called Stored Cross-Site Scripting. This can happen in any version up to version 2.4.8. The problem is caused by not properly checking and filtering the information that is put into the plugin and the information that is shown to users. This means that someone with at least Contributor-level access to the website can add harmful code to a page, and when a user visits that page, the code will run and potentially cause harm.