CVE-2024-35666

The Themesflat Addons For Elementor plugin versions up to and including 2.1.2 contains a stored cross-site scripting vulnerability that arises from failing to properly sanitize user input during web page generation. An attacker can exploit this flaw to inject and store malicious scripts that execute in the browsers of other users viewing affected pages. The vulnerability has been addressed in version 2.1.3 and later.

Based on public CVE data (MITRE/NVD).