Threats tagged 'ghsa-mpqf-3vc4-r52m'

The Element Pack Addons for Elementor WordPress plugin before version 8.7.13 contains a cross-site scripting (XSS) vulnerability. This flaw arises from insufficient sanitization of option values passed through certain data attributes, allowing users with contributor-level access or higher to inject arbitrary JavaScript. The injected script executes in the browser session of any visitor viewing the affected content, potentially compromising user interactions with the site.