Input validation vulnerability in HTML5 Radio Player – WPBakery Page Builder Addon 2.5

A plugin called “HTML5 Radio Player – WPBakery Page Builder Addon” for WordPress has a security issue. This issue, known as Reflected Cross-Site Scripting, affects all versions up to 2.5. It happens because the plugin does not properly clean up the input and output, which means that attackers who are not logged in can add malicious scripts to pages. This can happen if they convince a user to click on a link.