CVE-2026-120524 | Blazemes News Kit Addons for Elementor Plugin up to 1.4.8 on WordPress Output Escaping /wp-admin/profile.php handle_scripts formData cross site scripting

A vulnerability described as problematic has been identified in Blazemes News Kit Addons for Elementor Plugin up to 1.4.8 on WordPress. The impacted element is the function handle_scripts of the file /wp-admin/profile.php of the component Output Escaping. Executing a manipulation of the argument formData can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-120524. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More