Input validation vulnerability in WP VR – 360 Panorama and Virtual Tour Builder For WordPress 8.3.4

The WordPress VR plugin, up to and including version 8.3.4, is vulnerable to a type of attack known as Reflected Cross-Site Scripting. This means that an attacker could inject malicious code into a page on the site, if they can get a user to take an action such as clicking a link. This is because the plugin does not properly sanitize and escape user input, allowing the malicious code to run.