Input validation vulnerability in Audio Player with Playlist Ultimate 1.2.2

The Audio Player with Playlist Ultimate plugin for WordPress has a security vulnerability that affects versions up to, and including, 1.2.2. This means that if someone with a contributor-level access and higher uses the plugin, they can inject malicious code into pages that will be executed whenever someone views the page. The vulnerability comes from the fact that the plugin doesn’t properly sanitize input or escape output.