Input validation vulnerability in Qi Blocks 1.3.6

The plugin called “Qi Blocks” for WordPress has a security issue that allows malicious code to be injected into web pages. This can happen in all versions of the plugin up to version 1.3.6 because the plugin does not properly clean up user input or escape output. This means that attackers who have Contributor-level access or higher can add harmful code to pages, which will run whenever someone visits that page.