Input validation vulnerability in Same Category Posts 1.1.19

The Same Category Posts plugin for WordPress has a security issue that allows attackers to insert harmful code into pages. This can be done through the widget title placeholder feature in versions 1.1.19 and below. The problem is caused by a function that decodes special characters, making it possible for attackers with Author-level access or higher to inject their own code into pages. This can be dangerous for users who visit the affected pages.