Input validation vulnerability in Page Builder: Pagelayer – Drag and Drop website builder 1.7.7

The Page Builder: Pagelayer is a WordPress plugin that allows users to quickly and easily create websites using drag and drop features. Unfortunately, it has been found to be vulnerable to an attack called Stored Cross-Site Scripting. This attack can be used by someone with author-level access or higher on the website to inject arbitrary web scripts into pages, which can then be executed by any user who visits the affected page. This vulnerability exists in all versions of the plugin up to and including 1.7.7, due to a lack of proper input sanitization and output escaping.