Input validation vulnerability in Mega Elements – Addons for Elementor 1.1.9

The Mega Elements plugin for WordPress has a security issue called Stored Cross-Site Scripting, which affects versions 1.1.9 and below. This happens because the plugin does not properly clean up any harmful code that users input, allowing attackers with contributor-level access or higher to insert their own web scripts onto pages. This means that when a user visits a page with the injected code, it will run and potentially cause harm.