Magical Posts Display – Elementor Advanced Posts widgets, CVE-2025-54706

CVE, Research URL: CVE-2025-54706
Home page URL: Security reports for Magical Posts Display – Elementor Advanced Posts widgets
Application: Magical Posts Display – Elementor Advanced Posts widgets
Published on: Aug 14, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Magical Posts Display allows DOM-Based XSS. This issue affects Magical Posts Display: from n/a through 1.2.52.
Affected versions: max 1.2.53.
Status: vulnerable