Input validation vulnerability in Firelight Lightbox 2.3.14

The Firelight Lightbox plugin for WordPress has a security issue that allows attackers to inject harmful code into website pages. This can be done by posting certain types of content, and it affects all versions up to 2.3.14. The problem occurs because the plugin does not properly filter and secure the code when the jQuery Metadata library is being used. This means that users with Contributor-level access or higher can insert their own code into pages, which will then run whenever someone visits that page.