Input validation vulnerability in The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce 5.4.2

The Plus Addons for Elementor plugin for WordPress is at risk for a type of attack called Stored Cross-Site Scripting. This is because the plugin does not properly clean up user input and output, allowing attackers to insert harmful scripts into the website. This can be done by someone with contributor access or higher, and the scripts will run whenever a user visits a page with the injected code. It is possible that another reported issue, CVE-2024-34373, is the same problem.