idbbee <= 1.0 - Contributor+ Stored Cross-Site Scripting

Description The plugin does not adequately sanitize and escape user supplied attributes in the ‘idbbee’ shortcode. This can lead to injection of arbitrary web scripts that execute whenever a user accesses an injected page.