Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Display Name in Post Author Widget

Description

The plugin does not escape a user-controlled profile value before outputting it in a quoted attribute in one of its Elementor widgets, allowing authenticated users with the Author role to store a payload that executes in the session of anyone, including an administrator, who views a post the attacker authored, resulting in Stored Cross-Site Scripting.