Input validation vulnerability in Card Elements for Elementor 1.2.6

The Card Elements plugin for Elementor on WordPress is at risk for a type of hacking called Stored Cross-Site Scripting. This can happen through the plugin’s Profile Card feature in versions 1.2.6 and below, because the plugin does not properly check and protect against harmful code that a user may enter. This means that someone with contributor-level access or higher could potentially insert dangerous code into a page that will run whenever someone opens that page.