Threats tagged 'ghsa-h3xh-5g78-fc7p'

A stored cross-site scripting (XSS) vulnerability exists in WProyal Royal Elementor Addons, identified as CVE-2026-27421. This vulnerability involves improper neutralization of input during web page generation, allowing attackers to inject malicious scripts that persist on the affected site. The issue affects versions before 1.7.1053. The CVSS score is 6.5, indicating a medium severity with potential impacts on confidentiality, integrity, and availability.