Vulnerability found in Jeg Elementor Kit

The Jeg Elementor Kit plugin for WordPress has a security vulnerability that allows people to inject harmful code into web pages. This can be done by using the Testimonial Widget Attributes feature. This vulnerability exists in all versions up to 2.6.3 of the plugin and is caused by not properly filtering and protecting user input. It means that someone with contributor access or higher can add code to a page that will run when someone else visits that page.