Premium Addons for Elementor vulnerabilities

Cross Site Scripting (XSS) vulnerability in Premium Addons for Elementor versions up to 4.11.105. Allows an attacker to inject malicious script into the page.

Cross Site Scripting (XSS) vulnerability in the Premium Addons for Elementor plugin in versions up to and including 4.11.105. The vulnerability can be exploited by a user with Contributor privileges.

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premium_tooltip_text' parameter in versions up to and including 4.11.84 due to insufficient input sanitization and output escaping. This allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts that execute when an administrator opens the affected post in the Elementor editor.