Input validation vulnerability in Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages 1.5.1.7

The Landing Page Builder, a plugin for WordPress that allows users to create Coming Soon pages, Maintenance Mode pages, and Lead Pages, is currently at risk for a type of cyber attack known as Stored Cross-Site Scripting. This vulnerability affects all versions up to and including 1.5.1.7 and is due to a lack of proper input sanitization and output escaping. This means that attackers who are authenticated and have editor-level permissions or higher can insert harmful code into pages, which will then be executed whenever a user visits that page. This vulnerability only impacts multi-site installations and installations where unfiltered_html has been disabled.