Input validation vulnerability in MagicPost – WordPress文章管理功能增强插件 1.2.1

The MagicPost plugin for WordPress has a security issue where hackers can insert harmful code into a webpage using a feature called wb_share_social. This can happen in all versions of the plugin up to and including 1.2.1. It is a problem because the plugin does not properly clean or protect user-provided information, allowing attackers with certain levels of access to add their own code to a page. This code can then run when someone visits the affected page.