CyberRota Analysis
AI-GeneratedThe Royal Addons for Elementor WordPress plugin prior to version 1.7.1065 is vulnerable due to insufficient validation of a widget setting, enabling users with Contributor roles and higher to execute Stored Cross-Site Scripting (XSS) attacks. This vulnerability could lead to unauthorized script execution within the context of the affected site, potentially compromising user data and site integrity. WordPress site administrators, especially those using this plugin, should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Royal Addons for Elementor WordPress plugin before 1.7.1065 does not validate a widget setting used to build an HTML tag before outputting it, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.