Input validation vulnerability in tagDiv Composer 4.1

The TagDiv Composer plugin for WordPress is vulnerable to a type of security vulnerability called Stored Cross-Site Scripting when used with versions up to 4.1. This vulnerability can allow attackers with administrator-level permissions to inject malicious web scripts into pages that will be executed when a user accesses the page. This vulnerability only affects multi-site installations and installations where the security setting of unfiltered_html has been disabled.