The Image Accordion, Pricing Table and Team Member widgets in King Addons for Elementor printed the button animation setting directly into the button’s HTML class attribute without escaping it. A user able to edit Elementor content could inject arbitrary attributes or markup that then executes in the browser of every visitor who views the page. The fix passes the value through sanitize_html_class() and esc_attr() before it is written to the class attribute.
This vulnerability affects the following application versions:
- King Addons for Elementor 24.12.57
- King Addons for Elementor 24.12.58
- King Addons for Elementor 24.12.59
- King Addons for Elementor 24.12.60
- King Addons for Elementor 24.12.62
- King Addons for Elementor 24.12.63
- King Addons for Elementor 24.12.64
- King Addons for Elementor 24.12.65
- King Addons for Elementor 24.12.66
- King Addons for Elementor 24.12.76
- King Addons for Elementor 24.12.77
- King Addons for Elementor 24.12.78
- King Addons for Elementor 24.12.79
- King Addons for Elementor 24.12.80
- King Addons for Elementor 24.12.81
- King Addons for Elementor 24.12.82
- King Addons for Elementor 24.12.83
- King Addons for Elementor 24.12.84
- King Addons for Elementor 24.12.85
- King Addons for Elementor 24.12.86
- King Addons for Elementor 24.12.87
- King Addons for Elementor 24.12.88
- King Addons for Elementor 24.12.89
- King Addons for Elementor 24.12.90
- King Addons for Elementor 24.12.91
- King Addons for Elementor 24.12.92
- King Addons for Elementor 24.12.93
- King Addons for Elementor 51.1.2
- King Addons for Elementor 51.1.14
- King Addons for Elementor 51.1.35
- King Addons for Elementor 51.1.36
- King Addons for Elementor 51.1.37
- King Addons for Elementor 51.1.38
- King Addons for Elementor 51.1.39
- King Addons for Elementor 51.1.44
- King Addons for Elementor 51.1.45
- King Addons for Elementor 51.1.46
- King Addons for Elementor 51.1.47
- King Addons for Elementor 51.1.49
- King Addons for Elementor 51.1.51
- King Addons for Elementor 51.1.52
- King Addons for Elementor 51.1.53
- King Addons for Elementor 51.1.54
- King Addons for Elementor 51.1.55
- King Addons for Elementor 51.1.56
- King Addons for Elementor 51.1.57
- King Addons for Elementor 51.1.58
- King Addons for Elementor 51.1.59
- King Addons for Elementor 51.1.60
- King Addons for Elementor 51.1.61
- King Addons for Elementor 51.1.62
- King Addons for Elementor 51.1.63
- King Addons for Elementor 51.1.64
- King Addons for Elementor 51.1.65
- King Addons for Elementor 51.1.74
- King Addons for Elementor 51.1.75
- King Addons for Elementor 51.1.76
- King Addons for Elementor 51.1.77
- King Addons for Elementor 51.1.78
- King Addons for Elementor 51.1.79