Input validation vulnerability in Rescue Shortcodes 2.5

The Rescue Shortcodes plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack allows someone with limited access, such as an editor or above, to inject malicious scripts into pages on your website. These scripts will then run every time someone visits the page, which can be used to steal data or take over other user accounts. To protect your website, make sure you have version 2.5 or above of the plugin installed and that you have adequate input sanitization and output escaping measures in place.