Easy Video Player < 1.2.2.11 - Contributor+ Stored XSS

Description The plugin does not validate and escape the ratio_code attribute of its evp_embed_video shortcode before outputting it back in a page where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks