Due to insufficient input sensitization and output escaping on user supplied attributes, authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in Elementor Editor pages.
This vulnerability affects the following application versions:
- Elementor Website Builder 3.23.2
- Elementor Website Builder 3.23.3
- Elementor Website Builder 3.23.4