CVE-2021-24257

The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24257 Premium Addons for Elementor < 4.2.8 - Contributor+ Stored Cross-Site Scripting (XSS)

The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24257

CVE-2021-24257 affects the WordPress plugin Premium Addons for Elementor prior to version 4.2.8. The issue is stored cross-site scripting (XSS) in multiple widgets accessible to low-privilege users (e.g., contributors). The OpenVAS and WPVulnDB entries provide concrete details, including widget-r...