Name of the Vulnerable Software and Affected Versions:

Medical Addon for Elementor plugin for WordPress versions prior to 1.6.4

Description:

The Medical Addon for Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting via the Typewriter widget. Insufficient input sanitization and output escaping on user-supplied attributes allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts into pages. These scripts will execute when a user accesses the injected page.

Recommendations:

Update the Medical Addon for Elementor plugin to version 1.6.4 or later.