Input validation vulnerability in Slider Revolution 6.6.20

The Revslider plugin, which is used for WordPress websites, has a security vulnerability that allows for Stored Cross-Site Scripting. This means that attackers can upload malicious code, in the form of SVG files, which can then be executed whenever a user visits a page that contains the code. This vulnerability exists in all versions of the plugin up to version 6.6.20. It is caused by the plugin not properly checking and filtering the input and output of the code. This can only be exploited by administrators, but it is possible for other users to gain access to the plugin and potentially exploit it.