Threats tagged 'ghsa-g59v-m7c5-5xcp'

The Royal Elementor Addons and Templates plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in all versions up to and including 1.7.1036. This vulnerability arises from insufficient input sanitization and output escaping of the $item['field_id'] parameter. Authenticated users with Contributor-level access or higher can exploit this flaw to inject malicious scripts that execute when other users view the affected pages.