Input validation vulnerability in Shortcodes and extra features for Phlox theme 2.15.5

The Phlox theme plugin for WordPress has a feature called Shortcodes, which allows users to add extra elements to their website. However, this feature has a security vulnerability known as Stored Cross-Site Scripting. This means that attackers with a certain level of access can inject malicious code into pages, which will then be executed whenever a user visits that page. This vulnerability exists in all versions of the plugin up to version 2.15.5, due to a lack of proper protection against user input.