Cross-Site Scripting Vulnerability in Xpro Elementor Addons by Xpro

CVE-2025-58195

What is CVE-2025-58195?

A Cross-Site Scripting (XSS) vulnerability exists in the Xpro Elementor Addons, which can allow attackers to inject malicious scripts into the web application. This stored XSS vulnerability may enable an attacker to execute arbitrary JavaScript in the context of the users' browsers, potentially compromising user data or session information. The issue affects all versions of Xpro Elementor Addons until 1.4.17, making it critical for users to update promptly to mitigate the risk.

References