Input validation vulnerability in WPBakery Visual Composer 7.5

The wpbakery plugin used in WordPress is at risk of being attacked by malicious code through the Custom Heading tag feature. This can happen in all versions up to 7.5 because the plugin does not properly clean or secure the input and output of data. This means that someone who has access to the website, like a contributor or higher, can insert harmful scripts into pages which will run whenever someone visits that page.