Input validation vulnerability in Cards for Beaver Builder 1.1.4

The Cards for Beaver Builder plugin used in WordPress is at risk of being hacked through a method called Stored Cross-Site Scripting. This is because the plugin does not properly clean up and protect against certain types of input and output. As a result, attackers with a certain level of access can add harmful code to web pages, which will run whenever someone visits that page. This issue only impacts websites that have multiple sub-sites or have disabled a security measure called unfiltered_html.