CVE Catalog
CVE-2026-40720
HighCVSS 7.1Summary
Versions of Royal Elementor Addons Pro below 1.7.1041 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious JavaScript code.
Risk Assessment
This vulnerability may lead to user data theft and session hijacking, posing a serious threat to the application's security and the organization's data.
Recommendation
It is recommended to update to version 1.7.1041 or later to mitigate this vulnerability.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in Royal Elementor Addons Pro < 1.7.1041 versions.