CyberRota Analysis
AI-GeneratedUnlimited Elements for Elementor versions up to 2.0.12 are vulnerable to a reflected cross-site scripting (XSS) flaw due to improper input neutralization during web page generation. This vulnerability allows attackers to inject malicious scripts, potentially compromising user sessions or redirecting users to malicious sites. Organizations using this plugin should prioritize patching to mitigate the risk of exploitation.
Original NVD Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 2.0.12.