HT Mega 3.2.0 - 3.2.5 - Contributor+ Stored XSS via Section Headline Tag

Description

The plugin does not restrict the HTML tag name used to render the section headline in several of its widgets and blocks to a safe allowlist, allowing users with contributor-level access and above to store a crafted tag name that executes arbitrary JavaScript when the content is viewed, including by higher-privileged users who review or publish it.