Threats tagged 'ghsa-3j4f-m8xw-jfq5'

A stored cross-site scripting (XSS) vulnerability exists in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) versions up to 2.0.26. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker with low privileges and requiring user interaction to execute malicious scripts. The vulnerability impacts confidentiality, integrity, and availability to a limited extent.