Input validation vulnerability in Cookielay 1.2.0

The Cookielay plugin for WordPress has a security issue where it can be targeted by malicious attacks known as Stored Cross-Site Scripting. This happens through the use of the plugin’s cookielay shortcode, which is present in all versions up to and including 1.2.0. The problem is caused by the plugin not properly checking and securing user-provided information, which allows attackers with contributor-level access or higher to insert harmful code into pages. This code will then run whenever a user visits the infected page.