The animate-it plugin before 2.3.5 for WordPress has XSS.
Published October 9, 2019.
Eleopard Animate It\!