Lucene search
PRIOn knowledge basePRION:CVE-2021-24891HistoryNov 23, 2021 - 8:15 p.m.
Cross site scripting
2021-11-2320:15:00
PRIOn knowledge base
www.prio-n.com
22
0.001 Low
EPSS
Percentile
45.6%
The Elementor Website Builder WordPress plugin before 3.4.8 does not sanitise or escape user input appended to the DOM via a malicious hash, resulting in a DOM Cross-Site Scripting issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| website_builder | gt | 1.5.0 | |
| website_builder | lt | 3.1.4 | |
| website_builder | ge | 3.2.0 | |
| website_builder | lt | 3.4.8 |
Related
cvelist
cvelist
CVE-2021-24891 Elementor < 3.4.8 - DOM Cross-Site-Scripting
2021-11-23 19:16:21
nuclei
nuclei
WordPress Elementor Website Builder <3.1.4 - Cross-Site Scripting
2022-06-14 12:11:47
cve
cve
CVE-2021-24891
2021-11-23 20:15:10
patchstack
patchstack
openvas
openvas
WordPress Elementor Website Builder Plugin < 3.1.4 XSS Vulnerability
2021-12-06 00:00:00
nvd
nvd
CVE-2021-24891
2021-11-23 20:15:10