Input validation vulnerability in salient-core 2.0.2

The Salient Core plugin for WordPress is vulnerable to a type of cyber attack known as ‘Stored Cross-Site Scripting’. This means that people with certain levels of access in the plugin, such as contributors, can insert harmful code into pages which will be executed when someone visits those pages. All versions of the plugin up to version 2.0.2 are vulnerable to this attack. This is because the plugin doesn’t take enough precautions to protect user data and to make sure the code being inserted is safe.