Input validation vulnerability in Infusionsoft Web Form JavaScript 1.1.1

A plugin used in WordPress called “Infusionsoft Web Form JavaScript” has a security issue that can allow unauthorized users to insert harmful code into web pages. This can happen in versions 1.1.1 and below because the plugin does not properly clean up user input before displaying it on a page. As a result, attackers with contributor-level access or higher can inject their own code into a page, which will then run whenever someone visits that page.