Input validation vulnerability in JetElements 2.7.2.1

The JetElements plugin for WordPress has a security issue called Stored Cross-Site Scripting. This happens when certain features, called widgets, are used. This vulnerability exists in all versions up to 2.7.2.1. The problem is caused by not properly checking the information entered by users and not properly protecting the output of that information. This means that someone with contributor-level access or higher can add harmful code to a webpage, which will then run whenever someone visits that page.