CVE-2021-24271

The Ultimate Addons for Elementor plugin before version 1.30.0 contains stored cross-site scripting vulnerabilities in multiple widgets that can be exploited by users with contributor-level permissions or higher. An attacker with these privileges could inject malicious scripts that persist in the database and execute in the browsers of site visitors. The flaws were identified by the Wordfence Threat Intelligence team and follow a pattern similar to cross-site scripting issues previously found in the main Elementor plugin.

Based on public CVE data (MITRE/NVD).