Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-24891
HistoryNov 23, 2021 - 8:15 p.m.

CVE-2021-24891

2021-11-2320:15:10
CWE-79
[email protected]
web.nvd.nist.gov
4
elementor
wordpress
cross-site scripting
dom

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

47.3%

JSON

The Elementor Website Builder WordPress plugin before 3.4.8 does not sanitise or escape user input appended to the DOM via a malicious hash, resulting in a DOM Cross-Site Scripting issue.

Affected configurations

Nvd
Node
elementorwebsite_builderRange1.5.0–3.1.4wordpress
OR
elementorwebsite_builderRange3.2.0–3.4.8wordpress
VendorProductVersionCPE
elementorwebsite_builder*cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*

Related

cvelist 1
patchstack 1
cve 1
nuclei 1
prion 1
openvas 1
cvelist
cvelist
CVE-2021-24891 Elementor < 3.4.8 - DOM Cross-Site-Scripting
2021-11-23 19:16:21
patchstack
patchstack
WordPress Elementor Website Builder plugin <= 3.1.3 - DOM Cross-Site Scripting (XSS) vulnerability
2021-10-20 00:00:00
cve
cve
CVE-2021-24891
2021-11-23 20:15:10
nuclei
nuclei
WordPress Elementor Website Builder <3.1.4 - Cross-Site Scripting
2022-06-14 12:11:47
prion
prion
Cross site scripting
2021-11-23 20:15:00
openvas
openvas
WordPress Elementor Website Builder Plugin < 3.1.4 XSS Vulnerability
2021-12-06 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

47.3%

JSON
Related for NVD:CVE-2021-24891
cvelist1patchstack1cve1nuclei1prion1openvas1