The Premium Addons for Elementor WordPress plugin versions up to and including 4.11.70 contain a stored cross-site scripting (XSS) vulnerability via the 'custom_svg' parameter. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping.