Input validation vulnerability in Breakdance 1.7.2

The Breakdance plugin for WordPress has a security issue where attackers can inject harmful code into pages. This can be done by exploiting a parameter called breakdance_css_file_paths_cache. This vulnerability exists in all versions up to 1.7.2 and can be used by attackers with Contributor-level access or higher. This means that when a user visits a page with the injected code, it will execute and potentially harm the user’s device.