Input validation vulnerability in Slotti Ajanvaraus 1.3.1

The Slotti Ajanvaraus plugin for WordPress has a security issue where malicious code can be injected into web pages using the ‘slotti-embed-ga’ shortcode. This can happen in versions 1.3.1 and earlier because the plugin does not properly check and prevent harmful input from being added. As a result, attackers who have contributor-level access or higher can insert harmful code into pages which will then run whenever someone visits that page.