Stored XSS via FancyBox

Are the plugin affected with this vulnerability?
https://wpscan.com/vulnerability/f98fdb3f-c941-4f42-953d-99730e76352a/

I see some inconsistences between changelog txt, plugin changelog and WP Scan log

• On the zip changelog the latest entry is for 2.0.5
• on plugin page changelog it says 2.0.13
• On WP Scan review (https://wpscan.com/plugin/getwid/) it says there’s a 2.1.12 version.

Could you please provide some guidance about?

thanks in advance!