Elementor Website Builder

Authenticated (Contributor+) Stored CrossSite Scripting in the URL Parameter in Multiple Widgets vulnerability <= 3.23.4

Arbitrary SVG File Download vulnerability <= 3.22.1

Authenticated (Contributor+) DOMBased Stored CrossSite Scripting vulnerability < 3.21.6

Auth. Stored CrossSite Scripting vulnerability <= 3.20.2

Authenticated Stored CrossSite Scripting via get_image_alt vulnerability <= 3.18.3