CVE-2026-97340

The Avada | Website Builder For WordPress & WooCommerce theme (versions up to and including 7.16.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The issue resides in the Fusion_Social_Icon::get_markup() function, where social link contact-method fields (such as author_facebook) are emitt...