Stored cross-site scripting via shortcode

«The elementor element shortcude does not require any validation or authentication to ensure that the data was legitimate or intended for rendering. This allowed any user to craft a shortcode with arbitrary data and injec...»