Input validation vulnerability in WordPress RokBox 2.13

The WordPress RokBox plugin is a tool used to display media on websites. However, in versions up to and including 2.13, it has a vulnerability which allows attackers to inject malicious scripts into a victim’s browser. This is possible because the plugin does not properly check and sanitize the inputs it receives, nor does it properly escape the outputs it creates. If this issue is not addressed, attackers could exploit it to gain access to the website and any related information.