Input validation vulnerability in Stratum – Elementor Widgets 1.6.0

The Stratum – Elementor Widgets plugin for WordPress has a security vulnerability that allows hackers to inject harmful web scripts into pages. This can happen through the plugin’s Advanced Google Maps and Image Hotspot widgets in all versions up to 1.6.0. The problem is caused by a lack of proper protection on user-supplied information. This means that attackers with contributor-level access or higher can insert their own scripts into pages, which will then run whenever someone visits that page.