Input validation vulnerability in WP Matterport Shortcode 2.1.5

The WordPress Matterport Shortcode plugin contains a security flaw that could let an unauthenticated attacker inject malicious web scripts into pages. This security flaw exists in all versions of the plugin up to and including version 2.1.5 because of the lack of input sanitization and output escaping. To exploit this vulnerability, the attacker must be able to trick a user into performing an action, such as clicking on a link.