WordPress Document Embedder cross-site scripting vulnerability

WordPress Document Embedder versions 2.4.0 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and inadequate output escaping for the content parameter specifically, the postcontent block containing JSON with documentSource.doc. It may le...