Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-66622
HistoryMar 16, 2022 - 12:00 a.m.

WordPress Master Addons for Elementor plugin cross-site scripting vulnerability

2022-03-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.001 Low

EPSS

Percentile

44.3%

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress Master Addons for Elementor plugin versions prior to 1.8.5 contain a cross-site scripting vulnerability that stems from the plugin’s failure to error_message parameter before it returns jltma_restrict_content AJAX, an unauthenticated attacker can use this vulnerability to cause reflection cross-site scripting.

0.001 Low

EPSS

Percentile

44.3%