Input validation vulnerability in Schema & Structured Data for WP & AMP 1.51

The plugin called “Schema & Structured Data for WP & AMP” for WordPress has a security issue where it can be attacked by malicious code. This happens when using the plugin’s ‘saswp_tiny_multiple_faq’ feature, which is present in all versions up to and including 1.51. The problem is caused by not properly checking and removing harmful code from information that users provide. This allows attackers with contributor-level access or higher to insert their own code into webpages, which will then run whenever someone visits that page.