Input validation vulnerability in Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme 2.8.2

The Page Builder: KingComposer plugin for WordPress is vulnerable to a type of attack called “Stored Cross-Site Scripting”. This type of attack can allow malicious actors who have access to the post editor to insert malicious web scripts into pages that will be executed when someone visits the page. This vulnerability exists in versions of the plugin up to and including 2.8.1, due to a lack of proper input sanitization and output escaping.