Input validation vulnerability in Simple Spoiler 1.4

The Simple Spoiler plugin for WordPress has a security issue that allows hackers to insert harmful code into pages. This can happen in versions up to and including 1.4 because the plugin does not properly clean up the user’s input before showing it on the page. This means that anyone with contributor-level access or higher could potentially insert their own code that will run whenever someone visits the page.