A vulnerability labeled as problematic has been found in OoohBoi Steroids for Elementor Plugin up to 2.1.24 on WordPress. This vulnerability affects unknown code of the component URL Parameter Handler. Executing a manipulation of the argument _ob_spacerat_link/_ob_bbad_link/_ob_teleporter_link can lead to cross site scripting.

This vulnerability is handled as CVE-2026-3034. The attack can be executed remotely. There is not any exploit available.