Input validation vulnerability in Jeg Elementor Kit 2.6.5

The Jeg Elementor Kit plugin for WordPress has a security issue that could allow attackers to inject harmful code into web pages. This can happen when the sg_general_toggle_tab_enable and sg_accordion_style attributes are used in the plugin’s JKit – Tabs and JKit – Accordion widget. The vulnerability exists in all versions up to 2.6.5 and can be exploited by authenticated attackers with Contributor-level access or higher. This means that when a user visits a page with the injected code, it will execute and potentially cause harm.