Input validation vulnerability in Google Photos Gallery with Shortcodes 4.0.2

The Google Photos Gallery with Shortcodes plugin for WordPress has a security flaw that allows unauthenticated attackers to inject malicious web scripts into pages. If the user clicks on a link that the attacker has set up, the malicious script can execute. Versions of the plugin up to and including 4.0.2 are vulnerable to this security issue, which is caused by insufficient input sanitization and output escaping.