Threats tagged 'ghsa-x4c3-5562-wh3h'

A reflected Cross-site Scripting (XSS) vulnerability exists in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) versions up to 2.0.26. This vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to execute malicious scripts in users' browsers. The issue is identified as CWE-79 and has a high severity rating with a CVSS score of 7.1.