Threats tagged 'ghsa-vmp4-v624-jvcv'

A stored cross-site scripting (XSS) vulnerability exists in the WPVibes Elementor Addon Elements plugin (addon-elements-for-elementor-page-builder) affecting versions up to 1.5. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker with low privileges to execute malicious scripts in the context of other users. The CVSS 3.1 base score is 6.5, indicating a medium severity impact with partial confidentiality, integrity, and availability impact.