This vulnerability in Wealcoder Animation Addons for Elementor allows an attacker to inject and execute arbitrary scripts in the victim's browser due to improper input neutralization during page generation. It affects all versions up to 2.6.1. The issue is categorized as a DOM-based XSS, which can lead to client-side script execution if exploited. No CVSS score or official remediation details have been published yet.

Successful exploitation could allow an attacker to execute arbitrary JavaScript in the context of the affected website, potentially leading to session hijacking, defacement, or other client-side attacks. However, there are no reports of active exploitation in the wild, and the impact depends on the context in which the vulnerable plugin is used.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the vulnerable plugin or applying any recommended temporary mitigations from the vendor. Monitor official Wealcoder channels for updates.