Input validation vulnerability in Easy Social Feed – Social Photos Gallery – Post Feed – Like Box 6.6.7

The Easy Social Feed plugin for WordPress has a security issue where attackers can inject harmful scripts into pages. This can happen if the attacker has Contributor-level access or higher. The plugin is vulnerable in all versions up to 6.6.7 and this is because it doesn’t properly clean or protect the information that’s entered into the `data-caption` and `data-linktext` fields.