Stored Cross-Site Scripting in King Addons Button Animation Class

The Image Accordion, Pricing Table and Team Member widgets in King Addons for Elementor printed the button animation setting directly into the button's HTML class attribute without escaping it. A user able to edit Elementor content could inject arbitrary attributes or markup that then executes in the browser of every visitor who views the page.... Weiterlesen