Input validation vulnerability in Stratum – Elementor Widgets 1.4.7

The Stratum – Elementor Widgets plugin used in WordPress has a security issue where hackers can inject harmful code into a website using the plugin’s Image Hotspot widget. This can happen in all versions of the plugin up to version 1.4.7. The problem is caused by not properly checking and cleaning any user-provided information. Attackers who have contributor-level access or higher can take advantage of this vulnerability and add malicious scripts to pages that will run whenever someone visits those pages.