Threats tagged 'ghsa-h556-36wc-hwh6'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.4	EPSS 0.2%	CVE-2025-8444The Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates plugin for WordPress is Medium6.4EPSS 0.2%2026-06-10GCVE DatabaseCVE-2025-8444 The Animation Addons for Elementor plugin for WordPress contains a DOM-Based Stored Cross-Site Scripting (XSS) vulnerability in all versions up to and including 2.6.7. This vulnerability arises from insufficient input sanitization and output escaping of multiple parameters. Authenticated users with Contributor-level access or higher can exploit this flaw to inject arbitrary scripts into pages, which execute when other users view the affected pages. EPSS 0.2%Report on CVE-2025-8444 Vulnerability CWE-79 #ghsa-h556-36wc-hwh6	GCVE Database	2026-06-10

Page 1 of 1