Input validation vulnerability in ScanCircle 2.9.2

The ScanCircle plugin used in WordPress has a security issue called Stored Cross-Site Scripting. This happens when the plugin’s ‘scancircle’ shortcode is used, and affects all versions up to 2.9.2. This is because the plugin does not properly clean up and protect user input and output, making it possible for attackers with contributor-level access or higher to add harmful web scripts to pages. This can cause the scripts to run when a user visits the page.