6.4Mittel
Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
https://elementor.com/ Elementor Website Builder Pro
The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_text’ parameter in all versions up to, and including, 3.29.0 due to insufficient input sanitization and output escaping. This makes it possible…