Threats tagged 'ghsa-vhq6-qghq-j2g7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.3%	CVE-2026-111318The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored Medium5.4EPSS 0.3%2026-10-29GCVE DatabaseCVE-2026-111318 The HT Mega Addons for Elementor WordPress plugin (up to version 3.2.7) contains a stored DOM-based cross-site scripting (XSS) vulnerability via the href attribute of anchor tags inside the .htmega-tab-nav parameter. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts. Exploitation requires a co-installed plugin like wpDiscuz with its rich editor enabled, an HT Mega Tabs widget on the same page, and a victim clicking the injected link. EPSS 0.3%Report on CVE-2026-111318 Vulnerability CWE-79 #ghsa-vhq6-qghq-j2g7	GCVE Database	2026-10-29

Page 1 of 1