Input validation vulnerability in Enter Addons – Ultimate Template Builder for Elementor 2.1.5

The Enter Addons – Ultimate Template Builder for Elementor plugin for WordPress has a security vulnerability in its Heading widget. This vulnerability, known as Stored Cross-Site Scripting, affects all versions up to and including 2.1.5. It is caused by not properly cleaning and filtering user input, which allows attackers with contributor-level access or higher to insert harmful scripts into pages. These scripts will then run whenever a user visits the affected page.