Escape attributes and html.
use wp_kses_post() instead of esc_html() for descriptions and titles.
Merge pull request #10 from voceconnect/sanitization

Escape attributes and html.