Process Steps Template Designer < 1.3 - CSRF to Stored Cross-Site Scripting (XSS)

Description

The plugin did not properly check its CSRF nonce in the Font_Awesome_Field.save() method, which could allow attackers to make logged in users capable of editing posts change the Step Icon of arbitrary Process Steps. Due to the lack of sanitisation of the submitted Step icon value, it could also lead to a Stored XSS issue