An unauthenticated Cross Site Scripting (XSS) vulnerability exists in Razorpay Payment Button Elementor Plugin versions up to and including 1.2.8. This vulnerability allows attackers to inject malicious scripts without authentication, potentially impacting confidentiality, integrity, and availability of affected systems.