Lucene search
PRIOn knowledge basePRION:CVE-2024-1419HistoryMar 07, 2024 - 7:15 a.m.
Cross site scripting
2024-03-0707:15:00
PRIOn knowledge base
www.prio-n.com
2
wordpress
cross-site scripting
elementor plugin
input sanitization
output escaping
authenticated attackers
The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ attribute of the Header Meta Content widget in all versions up to, and including, 5.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Related
cvelist
cvelist
CVE-2024-1419
2024-03-07 06:59:47
cve
cve
CVE-2024-1419
2024-03-07 07:15:07
nvd
nvd
CVE-2024-1419
2024-03-07 07:15:07
wpvulndb
wpvulndb
wordfence
wordfence