CVE-2024-1996

Premium Addons Pro for Elementor versions before 2.9.13 contain a cross-site scripting vulnerability that was discovered by wesley (wcraft). An attacker could exploit this flaw to inject harmful scripts into a website, enabling them to execute redirects, advertisements, or other malicious HTML code that would run when visitors access the site. The vulnerability was patched in version 2.9.13, so users should update their plugin to this version or later.

Based on public CVE data (MITRE/NVD).