Input validation vulnerability in Team Members 5.3.1

The Team Members plugin for WordPress has a security flaw that allows attackers to inject harmful web scripts into pages using the plugin’s shortcode feature. This can happen if the attacker has contributor-level access or higher. The plugin is vulnerable in all versions up to 5.3.1 because it does not properly sanitize and escape user input. This means that when a user visits a page with the injected script, it will automatically run.