Input validation vulnerability in tagDiv Composer 4.8

The plugin called “tagDiv Composer” for WordPress has a security issue where malicious code can be inserted through a button feature. This can happen in all versions up to 4.8 if the user-provided information is not properly checked and sanitized. This means that someone with at least contributor-level access can add harmful code to a page that will run whenever someone views that page. It’s important to note that this problem is only found in the tagDiv Newspaper theme, and not in other themes like NewsMag.