Threats tagged 'ghsa-cg6g-c4m2-543r'

The RTMKit Addons for Elementor WordPress plugin contains a stored cross-site scripting (XSS) vulnerability in its Accordion Block attributes. This affects all versions up to and including 1.6.1. The flaw arises from insufficient input sanitization and output escaping, allowing authenticated users with contributor-level access or higher to inject malicious scripts that execute when other users view the affected pages.