Input validation vulnerability in Elementor Addon Elements 1.12.7

The Elementor Addon Elements plugin for WordPress is vulnerable to a particular type of cyber attack for versions up to and including version 1.12.7. This type of attack, called Stored Cross-Site Scripting, can be carried out by attackers with administrator-level permissions or higher. This attack makes it possible for attackers to inject malicious web scripts into pages, which then execute when users access those pages. This vulnerability only affects WordPress installations that are part of a multi-site network and installations where certain security features have been disabled.