Threats tagged 'ghsa-c3cp-8hf9-98fv'

The aThemes Addons for Elementor plugin for WordPress versions up to and including 1.1.5 contains a stored cross-site scripting (XSS) vulnerability in the Call To Action widget. This vulnerability arises from insufficient input sanitization and output escaping of user-supplied values, allowing authenticated users with contributor-level or higher permissions to inject malicious scripts that execute when other users view the affected pages.