Input validation vulnerability in HT Mega – Absolute Addons For Elementor 2.8.2

The HT Mega – Absolute Addons For Elementor plugin for WordPress has a security issue that allows hackers to inject harmful code into web pages. This can happen when a user with certain access levels adds a Countdown widget to a page. This vulnerability affects all versions up to 2.8.2 and is caused by not properly checking and filtering user input. This means that anyone with contributor-level access or higher can potentially exploit this vulnerability and execute malicious scripts on the injected page. Please note that this issue is a result of a previous fix that was not fully effective.