Threats tagged 'ghsa-c9qx-9qww-xqpw'

The Element Pack Addons for Elementor WordPress plugin contains a stored cross-site scripting (XSS) vulnerability in the Open Street Map widget's marker content parameter. This flaw affects all versions up to and including 8.3.4 and arises from insufficient input sanitization and output escaping. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected page.