Input validation vulnerability in Property Hive Mortgage Calculator 1.0.6

The Mortgage Calculator tool for WordPress, called Property Hive, has a security issue where attackers can inject harmful code through a certain parameter called ‘price’. This can happen in all versions up to 1.0.6 because the tool does not properly clean or filter the input and output. This means that people with certain access levels can add code to pages that will activate when someone visits the page.