The Navigation Menu widget read its toggle and close icon markup from data- attributes and injected it into the page as HTML without sanitising it. A contributor-level user who can edit a widget could store arbitrary markup that executes JavaScript in the browser of anyone viewing the page.
This vulnerability affects the following application versions:
- Ultimate Addons for Elementor 1.5.2
- Ultimate Addons for Elementor 1.5.3
- Ultimate Addons for Elementor 1.5.4
- Ultimate Addons for Elementor 1.5.5
- Ultimate Addons for Elementor 1.5.6
- Ultimate Addons for Elementor 1.5.7
- Ultimate Addons for Elementor 1.5.8
- Ultimate Addons for Elementor 1.5.9
- Ultimate Addons for Elementor 1.6.0
- Ultimate Addons for Elementor 1.6.1
- Ultimate Addons for Elementor 1.6.2
- Ultimate Addons for Elementor 1.6.3
- Ultimate Addons for Elementor 1.6.4
- Ultimate Addons for Elementor 1.6.5
- Ultimate Addons for Elementor 1.6.6
- Ultimate Addons for Elementor 1.6.7
- Ultimate Addons for Elementor 1.6.8
- Ultimate Addons for Elementor 1.6.9
- Ultimate Addons for Elementor 1.6.10
- Ultimate Addons for Elementor 1.6.11
- Ultimate Addons for Elementor 1.6.12
- Ultimate Addons for Elementor 1.6.13
- Ultimate Addons for Elementor 1.6.14
- Ultimate Addons for Elementor 1.6.15
- Ultimate Addons for Elementor 1.6.16
- Ultimate Addons for Elementor 1.6.17
- Ultimate Addons for Elementor 1.6.18
- Ultimate Addons for Elementor 1.6.19
- Ultimate Addons for Elementor 1.6.20
- Ultimate Addons for Elementor 1.6.21
- Ultimate Addons for Elementor 1.6.22
- Ultimate Addons for Elementor 1.6.23
- Ultimate Addons for Elementor 1.6.24
- Ultimate Addons for Elementor 1.6.25
- Ultimate Addons for Elementor 1.6.26
- Ultimate Addons for Elementor 1.6.27
- Ultimate Addons for Elementor 1.6.28
- Ultimate Addons for Elementor 1.6.29
- Ultimate Addons for Elementor 1.6.30
- Ultimate Addons for Elementor 1.6.31
- Ultimate Addons for Elementor 1.6.32
- Ultimate Addons for Elementor 1.6.33
- Ultimate Addons for Elementor 1.6.34
- Ultimate Addons for Elementor 1.6.35
- Ultimate Addons for Elementor 1.6.36
- Ultimate Addons for Elementor 1.6.37
- Ultimate Addons for Elementor 1.6.38
- Ultimate Addons for Elementor 1.6.39
- Ultimate Addons for Elementor 1.6.40
- Ultimate Addons for Elementor 1.6.41
- Ultimate Addons for Elementor 1.6.42
- Ultimate Addons for Elementor 1.6.43
- Ultimate Addons for Elementor 1.6.44
- Ultimate Addons for Elementor 1.6.45
- Ultimate Addons for Elementor 1.6.46
- Ultimate Addons for Elementor 1.6.47
- Ultimate Addons for Elementor 2.0.0
- Ultimate Addons for Elementor 2.0.1
- Ultimate Addons for Elementor 2.0.2
- Ultimate Addons for Elementor 2.0.3
- Ultimate Addons for Elementor 2.0.4
- Ultimate Addons for Elementor 2.0.5
- Ultimate Addons for Elementor 2.0.6
- Ultimate Addons for Elementor 2.1.0
- Ultimate Addons for Elementor 2.2.0
- Ultimate Addons for Elementor 2.2.1
- Ultimate Addons for Elementor 2.2.2
- Ultimate Addons for Elementor 2.2.3
- Ultimate Addons for Elementor 2.2.4
- Ultimate Addons for Elementor 2.3.0
- Ultimate Addons for Elementor 2.3.1
- Ultimate Addons for Elementor 2.3.2
- Ultimate Addons for Elementor 2.4.0
- Ultimate Addons for Elementor 2.4.1
- Ultimate Addons for Elementor 2.4.2
- Ultimate Addons for Elementor 2.4.3
- Ultimate Addons for Elementor 2.4.4
- Ultimate Addons for Elementor 2.4.5
- Ultimate Addons for Elementor 2.4.6
- Ultimate Addons for Elementor 2.4.7
- Ultimate Addons for Elementor 2.4.8
- Ultimate Addons for Elementor 2.4.9
- Ultimate Addons for Elementor 2.5.0
- Ultimate Addons for Elementor 2.5.1
- Ultimate Addons for Elementor 2.5.2
- Ultimate Addons for Elementor 2.6.0
- Ultimate Addons for Elementor 2.6.1
- Ultimate Addons for Elementor 2.6.2
- Ultimate Addons for Elementor 2.7.0
- Ultimate Addons for Elementor 2.7.1
- Ultimate Addons for Elementor 2.8.0
- Ultimate Addons for Elementor 2.8.1
- Ultimate Addons for Elementor 2.8.2
- Ultimate Addons for Elementor 2.8.3
- Ultimate Addons for Elementor 2.8.4
- Ultimate Addons for Elementor 2.8.5
- Ultimate Addons for Elementor 2.8.6
- Ultimate Addons for Elementor 2.8.7
- Ultimate Addons for Elementor 2.8.8
- Ultimate Addons for Elementor 2.9.0
- Ultimate Addons for Elementor 2.9.1