Input validation vulnerability in WPZOOM Addons for Elementor (Templates, Widgets) 1.1.38

The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress has a security issue that could allow attackers to inject harmful scripts into websites. This could happen through the ‘url’ feature in the Team Members widget. This vulnerability affects all versions of the plugin up to 1.1.38 and is caused by not properly filtering and protecting user input. As a result, users with Contributor-level access or higher could potentially access pages with the injected scripts, causing harm to anyone who visits those pages.