Lucene search
PRIOn knowledge basePRION:CVE-2022-3862HistoryDec 12, 2022 - 6:15 p.m.
Cross site scripting
2022-12-1218:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
xss
vulnerability
elementor
plugin
sanitisation
stored
attack
admin
unfiltered_html
capability
multisite
0.001 Low
EPSS
Percentile
23.4%
The Livemesh Addons for Elementor WordPress plugin before 7.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
| CPE | Name | Operator | Version |
|---|---|---|---|
| addons_for_elementor | lt | 7.2.4 |
Related
nvd
nvd
CVE-2022-3862
2022-12-12 18:15:10
cvelist
cvelist
CVE-2022-3862 Livemesh Addons for Elementor < 7.2.4 - Admin+ Stored XSS
2022-12-12 17:54:57
wpvulndb
wpvulndb
Livemesh Addons for Elementor < 7.2.4 - Admin+ Stored XSS
2022-11-21 00:00:00
wpexploit
wpexploit
Livemesh Addons for Elementor < 7.2.4 - Admin+ Stored XSS
2022-11-21 00:00:00
cve
cve
CVE-2022-3862
2022-12-12 18:15:10
openvas
openvas
WordPress Livemesh Addons for Elementor Plugin < 7.2.4 XSS Vulnerability
2023-01-26 00:00:00