Input validation vulnerability in WP-Appbox 4.5.4

The WP-Appbox plugin for WordPress has a security issue that allows attackers to inject malicious code into pages. This can happen if the attacker has contributor-level access or higher and uses the plugin’s appbox shortcode. It affects all versions up to 4.5.4 because the plugin does not properly filter and protect user input. This means that whenever a user views a page with the injected code, it will run and potentially cause harm.