CVE-2025-1039

CVE-2025-1039 : Lenix Elementor Leads addon for WordPress suffers stored XSS via a URL form field in versions up to 1.8.2 due to insufficient input sanitization and output escaping, enabling unauthenticated attackers to inject scripts on pages viewed by users. Red Hat confirms the same issue unde...