CVE-2019-17385

The animate-it plugin before 2.3.5 for WordPress has XSS.
Source: NIST
CVE-2019-17385