Stored Cross-Site Scripting in Royal Addons for Elementor Countdown Widget

Royal Addons for Elementor up to and including 1.7.1001 copies the Countdown widget’s Redirect URL setting into the timer’s expire actions without URL sanitisation, and the front-end script assigns it to window.location.href when the timer expires. An authenticated attacker with Contributor-level access or above can store a javascript: URL there, so arbitrary script runs in the browser of every visitor who opens the page.

This vulnerability affects the following application versions:

• Royal Addons for Elementor 1.0.0
• Royal Addons for Elementor 1.1.0
• Royal Addons for Elementor 1.2
• Royal Addons for Elementor 1.3
• Royal Addons for Elementor 1.3.1
• Royal Addons for Elementor 1.3.2
• Royal Addons for Elementor 1.3.21
• Royal Addons for Elementor 1.3.22
• Royal Addons for Elementor 1.3.23
• Royal Addons for Elementor 1.3.24
• Royal Addons for Elementor 1.3.25
• Royal Addons for Elementor 1.3.26
• Royal Addons for Elementor 1.3.27
• Royal Addons for Elementor 1.3.28
• Royal Addons for Elementor 1.3.29
• Royal Addons for Elementor 1.3.30
• Royal Addons for Elementor 1.3.31
• Royal Addons for Elementor 1.3.32
• Royal Addons for Elementor 1.3.33
• Royal Addons for Elementor 1.3.34
• Royal Addons for Elementor 1.3.35
• Royal Addons for Elementor 1.3.36
• Royal Addons for Elementor 1.3.37
• Royal Addons for Elementor 1.3.38
• Royal Addons for Elementor 1.3.39
• Royal Addons for Elementor 1.3.40
• Royal Addons for Elementor 1.3.41
• Royal Addons for Elementor 1.3.42
• Royal Addons for Elementor 1.3.43
• Royal Addons for Elementor 1.3.44
• Royal Addons for Elementor 1.3.45
• Royal Addons for Elementor 1.3.46
• Royal Addons for Elementor 1.3.47
• Royal Addons for Elementor 1.3.48
• Royal Addons for Elementor 1.3.49
• Royal Addons for Elementor 1.3.50
• Royal Addons for Elementor 1.3.51
• Royal Addons for Elementor 1.3.52
• Royal Addons for Elementor 1.3.53
• Royal Addons for Elementor 1.3.54
• Royal Addons for Elementor 1.3.55
• Royal Addons for Elementor 1.3.56
• Royal Addons for Elementor 1.3.57
• Royal Addons for Elementor 1.3.58
• Royal Addons for Elementor 1.3.59
• Royal Addons for Elementor 1.3.60
• Royal Addons for Elementor 1.3.61
• Royal Addons for Elementor 1.3.62
• Royal Addons for Elementor 1.3.63
• Royal Addons for Elementor 1.3.64
• Royal Addons for Elementor 1.3.65
• Royal Addons for Elementor 1.3.66
• Royal Addons for Elementor 1.3.67
• Royal Addons for Elementor 1.3.68
• Royal Addons for Elementor 1.3.69
• Royal Addons for Elementor 1.3.70
• Royal Addons for Elementor 1.3.71
• Royal Addons for Elementor 1.3.72
• Royal Addons for Elementor 1.3.73
• Royal Addons for Elementor 1.3.74
• Royal Addons for Elementor 1.3.75
• Royal Addons for Elementor 1.3.76
• Royal Addons for Elementor 1.3.77
• Royal Addons for Elementor 1.3.78
• Royal Addons for Elementor 1.3.79
• Royal Addons for Elementor 1.3.80
• Royal Addons for Elementor 1.3.81
• Royal Addons for Elementor 1.3.82
• Royal Addons for Elementor 1.3.83
• Royal Addons for Elementor 1.3.84
• Royal Addons for Elementor 1.3.85
• Royal Addons for Elementor 1.3.86
• Royal Addons for Elementor 1.3.87
• Royal Addons for Elementor 1.3.88
• Royal Addons for Elementor 1.3.89
• Royal Addons for Elementor 1.3.90
• Royal Addons for Elementor 1.3.91
• Royal Addons for Elementor 1.3.92
• Royal Addons for Elementor 1.3.93
• Royal Addons for Elementor 1.3.94
• Royal Addons for Elementor 1.3.95
• Royal Addons for Elementor 1.3.96
• Royal Addons for Elementor 1.3.97
• Royal Addons for Elementor 1.3.971
• Royal Addons for Elementor 1.3.972
• Royal Addons for Elementor 1.3.973
• Royal Addons for Elementor 1.3.974
• Royal Addons for Elementor 1.3.975
• Royal Addons for Elementor 1.3.976
• Royal Addons for Elementor 1.3.977
• Royal Addons for Elementor 1.3.978
• Royal Addons for Elementor 1.3.979
• Royal Addons for Elementor 1.3.980
• Royal Addons for Elementor 1.3.981
• Royal Addons for Elementor 1.3.982
• Royal Addons for Elementor 1.3.983
• Royal Addons for Elementor 1.3.984
• Royal Addons for Elementor 1.3.985
• Royal Addons for Elementor 1.3.986
• Royal Addons for Elementor 1.3.987
• Royal Addons for Elementor 1.7.1
• Royal Addons for Elementor 1.7.1001