Input validation vulnerability in Stock Ticker 3.23.4

The Stock Ticker plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This means that if someone with contributor-level or higher permissions uses the plugin, they can inject malicious code into a page. When other users access the page, the malicious code will run and could cause harm. All versions of the plugin up to and including 3.23.4 are vulnerable to this attack due to inadequate protections against malicious input and output.