Lucene search
PRIOn knowledge basePRION:CVE-2020-36703HistoryJun 07, 2023 - 2:15 a.m.
Cross site scripting
2023-06-0702:15:00
PRIOn knowledge base
www.prio-n.com
2
elementor
wordpress
plugin
vulnerability
authenticated attackers
stored cross-site scripting
svg
image uploads
web scripts
0.001 Low
EPSS
Percentile
34.7%
The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG image uploads in versions up to, and including 2.9.7 This makes it possible for authenticated attackers with the upload_files capability to inject arbitrary web scripts in pages that will execute whenever a user accesses the page with the stored web scripts.
| CPE | Name | Operator | Version |
|---|---|---|---|
| website_builder | le | 2.9.7 |
Related
cve
cve
CVE-2020-36703
2023-06-07 02:15:11
cvelist
cvelist
CVE-2020-36703
2023-06-07 01:51:17
nvd
nvd
CVE-2020-36703
2023-06-07 02:15:11