Input validation vulnerability in HTML5 Audio Player- Best WordPress Audio Player Plugin 2.2.28

The plugin called Html5 Audio Player, used for playing audio on WordPress websites, has a security issue. This issue, called Stored Cross-Site Scripting, can be found in all versions up to and including 2.2.28. This happens because the plugin does not properly clean and protect user input and output. This can allow attackers who have contributor-level access or higher to add harmful code to web pages. This code will then run whenever a user visits that page.