Input validation vulnerability in Mega Elements – Addons for Elementor 1.2.6

The Mega Elements plugin for WordPress has a security issue called Stored Cross-Site Scripting. This can happen in versions 1.2.6 and below because the plugin does not properly clean or filter the information that is inputted and outputted. This means that attackers who have contributor-level access or higher can insert their own malicious code into pages, and when a user views that page, the code will be executed.