CVE-2024-4615 Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widget

[
  {
    "vendor": "elespare",
    "product": "Elespare – News, Magazine and Blog Elements & Blog Addons for Elementor with Header Footer Builder. One Click Import: No Coding Required!",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "3.1.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]