Input validation vulnerability in Betheme 27.6.1

The Betheme plugin for WordPress has a security issue that allows hackers to inject malicious code into web pages. This can happen in all versions up to 27.6.1 because the plugin does not properly clean up input and output from user-provided attributes. As a result, attackers with contributor-level access or higher can add harmful scripts to pages, which will run whenever someone visits that page.