CVE-2021-24205

The Elementor Website Builder WordPress plugin (versions before 3.1.4 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw in the icon box widget (specifically includes/widgets/icon-box.php). The issue occurs because the title_size parameter accepts unsanitized input; a user with Contribut...