< 2.3.6
2.3.6
The animate-it plugin before 2.3.5 for WordPress has XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.