Stored cross-site scripting via shortcode

The elementor element shortcude does not require any validation or authentication to ensure that the data was legitimate or intended for rendering. This allowed any user to craft a shortcode with arbitrary data and inject content into posts or pages. Since the data could contain rendered HTML or widgets, this posed a risk of unauthorized content injection, possible privilege escalation, or stored XSS, depending on how the data was used.

This vulnerability affects the following application versions:

• Elementor Website Builder 3.22.0
• Elementor Website Builder 3.22.0-beta1
• Elementor Website Builder 3.22.0-beta2
• Elementor Website Builder 3.22.0-beta3
• Elementor Website Builder 3.22.0-beta4
• Elementor Website Builder 3.22.0-beta5
• Elementor Website Builder 3.22.0-beta6
• Elementor Website Builder 3.22.0-dev1
• Elementor Website Builder 3.22.0-dev2
• Elementor Website Builder 3.22.0-dev3
• Elementor Website Builder 3.22.0-dev4
• Elementor Website Builder 3.22.0-dev5
• Elementor Website Builder 3.22.0-dev6
• Elementor Website Builder 3.22.1
• Elementor Website Builder 3.22.2
• Elementor Website Builder 3.22.3
• Elementor Website Builder 3.23.0
• Elementor Website Builder 3.23.0-beta1
• Elementor Website Builder 3.23.0-beta2
• Elementor Website Builder 3.23.0-beta3
• Elementor Website Builder 3.23.0-beta4
• Elementor Website Builder 3.23.0-beta5
• Elementor Website Builder 3.23.0-beta6
• Elementor Website Builder 3.23.0-dev1
• Elementor Website Builder 3.23.0-dev2
• Elementor Website Builder 3.23.0-dev3
• Elementor Website Builder 3.23.0-dev4
• Elementor Website Builder 3.23.0-dev5
• Elementor Website Builder 3.23.0-dev6
• Elementor Website Builder 3.23.1
• Elementor Website Builder 3.23.2
• Elementor Website Builder 3.23.3
• Elementor Website Builder 3.23.4
• Elementor Website Builder 3.24.0
• Elementor Website Builder 3.24.0-beta1
• Elementor Website Builder 3.24.0-beta2
• Elementor Website Builder 3.24.0-beta3
• Elementor Website Builder 3.24.0-dev1
• Elementor Website Builder 3.24.0-dev2
• Elementor Website Builder 3.24.0-dev3
• Elementor Website Builder 3.24.1
• Elementor Website Builder 3.24.2
• Elementor Website Builder 3.24.3
• Elementor Website Builder 3.24.4
• Elementor Website Builder 3.24.5
• Elementor Website Builder 3.24.6
• Elementor Website Builder 3.24.7
• Elementor Website Builder 3.24.8
• Elementor Website Builder 3.25.0
• Elementor Website Builder 3.25.0-beta1
• Elementor Website Builder 3.25.0-beta2
• Elementor Website Builder 3.25.0-beta3
• Elementor Website Builder 3.25.0-dev1
• Elementor Website Builder 3.25.0-dev2
• Elementor Website Builder 3.25.0-dev3
• Elementor Website Builder 3.25.1
• Elementor Website Builder 3.25.2
• Elementor Website Builder 3.25.3
• Elementor Website Builder 3.25.4
• Elementor Website Builder 3.25.5
• Elementor Website Builder 3.25.6
• Elementor Website Builder 3.25.7
• Elementor Website Builder 3.25.8
• Elementor Website Builder 3.25.9
• Elementor Website Builder 3.25.10
• Elementor Website Builder 3.25.11
• Elementor Website Builder 3.26.0
• Elementor Website Builder 3.26.0-beta1
• Elementor Website Builder 3.26.0-beta2
• Elementor Website Builder 3.26.0-beta3
• Elementor Website Builder 3.26.0-beta4
• Elementor Website Builder 3.26.0-beta5
• Elementor Website Builder 3.26.0-dev1
• Elementor Website Builder 3.26.0-dev2
• Elementor Website Builder 3.26.0-dev3
• Elementor Website Builder 3.26.0-dev4
• Elementor Website Builder 3.26.0-dev5
• Elementor Website Builder 3.26.1
• Elementor Website Builder 3.26.2
• Elementor Website Builder 3.26.3
• Elementor Website Builder 3.26.4
• Elementor Website Builder 3.26.5
• Elementor Website Builder 3.27.0
• Elementor Website Builder 3.27.0-beta1
• Elementor Website Builder 3.27.0-beta2
• Elementor Website Builder 3.27.0-dev1
• Elementor Website Builder 3.27.0-dev2
• Elementor Website Builder 3.27.1
• Elementor Website Builder 3.27.2
• Elementor Website Builder 3.27.3
• Elementor Website Builder 3.27.4
• Elementor Website Builder 3.27.5
• Elementor Website Builder 3.27.6
• Elementor Website Builder 3.27.7
• Elementor Website Builder 3.28.0
• Elementor Website Builder 3.28.0-beta1
• Elementor Website Builder 3.28.0-beta2
• Elementor Website Builder 3.28.0-beta3
• Elementor Website Builder 3.28.0-dev1
• Elementor Website Builder 3.28.0-dev2
• Elementor Website Builder 3.28.0-dev3
• Elementor Website Builder 3.28.1
• Elementor Website Builder 3.28.2
• Elementor Website Builder 3.28.3
• Elementor Website Builder 3.28.4
• Elementor Website Builder 3.29.0
• Elementor Website Builder 3.29.0-beta1
• Elementor Website Builder 3.29.0-beta2
• Elementor Website Builder 3.29.0-beta3
• Elementor Website Builder 3.29.0-beta4
• Elementor Website Builder 3.29.0-dev1
• Elementor Website Builder 3.29.0-dev2
• Elementor Website Builder 3.29.0-dev3
• Elementor Website Builder 3.29.0-dev4