Input validation vulnerability in HT Mega – Absolute Addons For Elementor 2.5.2

The HT Mega plugin for WordPress, called Absolute Addons For Elementor, has a security issue. This issue is related to a feature in the plugin called ‘popover_header_text’. This feature does not have proper protection in place to prevent harmful code from being added. This means that someone with certain permissions, such as a contributor or higher, can add malicious code to a page that will run whenever someone views that page.