Shortcode Menu <= 3.2 - Contributor+ Stored Cross-Site Scripting

Description The plugin does not properly sanitize user input or escape output in the ‘shortmenu’ shortcode, leading to a Stored Cross-Site Scripting vulnerability. This issue allows authenticated users with contributor-level and above permissions to inject arbitrary web scripts into pages.