Live Composer < 2.1.24 - Contributor+ Stored XSS via Module Area Shortcode

Description

The plugin does not escape several attributes of one of its page-builder shortcodes before outputting them inside HTML tag attributes, allowing users with the Contributor role and above to store a payload that executes in the browser of anyone who views the post, including an administrator reviewing the pending submission.