Threats tagged 'ghsa-2qjx-g968-63pp'

The Royal Addons for Elementor WordPress plugin versions before 1.7.1070 contain a vulnerability in a map widget's size setting that is not properly sanitized or escaped. This flaw allows users with Contributor role or higher to inject JavaScript code that executes in the browsers of users viewing the affected page, including administrators reviewing submissions.