Input validation vulnerability in WPCS – WordPress Currency Switcher Professional 1.2.0

The WordPress Currency Switcher Professional plugin for WordPress has a security vulnerability in all versions up to 1.2.0. This vulnerability allows attackers with contributor-level permissions or higher to inject malicious code into pages. This code will execute when a user accesses the page with the malicious code. The vulnerability exists because the plugin does not properly sanitize user inputs or escape output.