The plugin did not correctly escape input from Select2 dropdowns, which could lead to Cross-Site Scripting issues