Input validation vulnerability in Elementor Website Builder – More than Just a Page Builder 3.5.4

The Elementor plugin for WordPress is vulnerable to a security risk called Reflected Cross-Site Scripting. This vulnerability exists in versions up to, and including, 3.5.4. It is caused by the plugin not properly filtering and protecting user input. Unauthenticated attackers could exploit this vulnerability by creating links that, when clicked, inject malicious code such as iframes into pages.