CVE-2026-13709

Name of the Vulnerable Software and Affected Versions Graphina – Charts and Graphs For Elementor versions prior to 3.1.12

Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access and above can inject arbitrary web scripts through the iq tree tree chart template Widget Setting. These scripts execute whenever a user accesses the affected page.

Recommendations Update Graphina – Charts and Graphs For Elementor to version 3.1.12 or later. Restrict access to the iq tree tree chart template Widget Setting to minimize the risk of exploitation.