CKEditor version (4.4.7) of Q2A wysiwyg-editor plugin is old. And it has XSS vulnerability. Therefore I replaced it with CKEditor4 plugin. And CKEditor version of CKEditor4 plugin updated to V4.5.3.