CVE-2021-24256

The “Elementor – Header, Footer & Blocks Template” WordPress Plugin before 1.5.8 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24256

The CVE-2021-24256 entry concerns the WordPress plugin “Elementor – Header, Footer & Blocks Template” (before 1.5.8). Connected documents provide concrete details: two widgets (Page Title and Site Title) that can store XSS via parameters such as heading_tag and size, allowing lower-privileged use...