Cross site scripting

The “DeTheme Kit for Elementor” WordPress Plugin before 1.5.5.5 has a widget that is vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

PT-2021-15810

Name of the Vulnerable Software and Affected Versions DeTheme Kit for Elementor version 1.5.5.5 and earlier Description The issue concerns a stored Cross-Site Scripting XSS vulnerability in a widget of the DeTheme Kit for Elementor WordPress Plugin. This vulnerability can be exploited by...

CVE-2021-24270: Improper Neutralization of Input During Web Page Generation

The “DeTheme Kit for Elementor” WordPress Plugin before 1.5.5.5 has a widget that is vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...