WordPress · Make Column Clickable Elementor · CVE-2025-59592
**Name of the Vulnerable Software and Affected Versions**
Make Column Clickable Elementor versions through 1.6.0
**Description**
The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting (XSS). This allows for the injection of malicious scripts into web pages viewed by other users. The issue is a Stored XSS, meaning the malicious script is permanently stored on the target server.
**Recommendations**
Update Make Column Clickable Elementor to a version later than 1.6.0.