Input validation vulnerability in WordPress Shortcodes Plugin — Shortcodes Ultimate 4.9.3

The WordPress Shortcodes Plugin, also known as Shortcodes Ultimate, is vulnerable to a type of attack called Reflected Cross-Site Scripting in versions up to 4.9.3. This type of attack occurs when malicious scripts can be injected into webpages, such as clicking on a link, without the user’s authentication or knowledge. If this happens, the scripts can be executed, allowing the attacker to gain access to the user’s information and potentially take control of the device. To prevent this from happening, it is important to make sure all input is sanitized and all output is escaped.