Input validation vulnerability in JSM Screenshot Machine Shortcode 2.3.0

The JSM Screenshot Machine Shortcode plugin for WordPress has a security issue that can allow hackers to insert harmful code on a website. This can happen through the plugin’s ‘ssm’ shortcode feature, which is vulnerable in all versions up to 2.3.0. The problem is caused by not properly filtering and protecting user input, which means that anyone with contributor-level access or higher can potentially inject malicious code into pages. This code will then be executed whenever a user visits the affected page.