Lucene search
+L

95 matches found

CNVD
CNVD
added 2022/02/25 12:00 a.m.16 views

WordPress Essential Addons for Elementor Lite跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Essential Addons for Elementor Lite has a cross-site scripting vulnerability that can be exploited by an attacker to inject...

6.1CVSS1.3AI score0.03243EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/24 7:15 p.m.10 views

CVE-2022-0683

The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the settings parameter found in the /includes/Traits/Helper.php file which allows attackers to inject arbitrary web scripts onto a pages that executes...

6.1CVSS5.8AI score0.03243EPSS
SaveExploits0References2
NVD
NVD
added 2022/02/24 7:15 p.m.33 views

CVE-2022-0683

The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the settings parameter found in the /includes/Traits/Helper.php file which allows attackers to inject arbitrary web scripts onto a pages that executes...

6.1CVSS0.03243EPSS
SaveExploits0References2
Prion
Prion
added 2022/02/24 7:15 p.m.25 views

Cross site scripting

The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the settings parameter found in the /includes/Traits/Helper.php file which allows attackers to inject arbitrary web scripts onto a pages that executes...

4.3CVSS6AI score0.03243EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/02/24 6:27 p.m.176 views

CVE-2022-0683

CVE-2022-0683 affects the WordPress plugin WordPress Essential Addons for Elementor Lite. The vulnerability is a Cross-Site Scripting (XSS) due to insufficient escaping and sanitization of the settings parameter found in includes/Traits/Helper.php, exploitable when a user clicks a crafted link. A...

6.1CVSS6AI score0.03243EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/02/24 12:00 a.m.9 views

WordPress plugin Essential Addons for Elementor Lite 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Essential Addons for Elementor Lite has a cross-site scripting vulnerability that can be exploited by an attacker to inject...

6.1CVSS5.5AI score0.03243EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2022/02/18 12:00 a.m.28 views

Essential Addons for Elementor Lite < 5.0.9 - Reflected Cross-Site Scripting

The plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the settings parameter found in the /includes/Traits/Helper.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user clicks on a specially crafted li...

6.1CVSS5.3AI score0.03243EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2021/05/10 12:00 a.m.16 views

WordPress Essential Addons for Elementor Lite Plugin Cross-Site Scripting Vulnerability

WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Essential Addons for Elementor Lite Plugin versions prior to 4.5.4. An attacker can exploit this vulnerability to launch a cross-site scripting attack...

5.4CVSS6AI score0.0059EPSS
SaveExploits0References1
OSV
OSV
added 2021/05/05 7:15 p.m.11 views

CVE-2021-24266

The “The Plus Addons for Elementor Page Builder Lite” WordPress Plugin before 2.0.6 has four widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

5.4CVSS5.8AI score0.0059EPSS
SaveExploits0References2
OSV
OSV
added 2021/05/05 7:15 p.m.10 views

CVE-2021-24255

The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, both via a similar method...

5.4CVSS5.8AI score0.0059EPSS
SaveExploits0References2
NVD
NVD
added 2021/05/05 7:15 p.m.25 views

CVE-2021-24255

The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, both via a similar method...

5.4CVSS0.0059EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/05/05 6:28 p.m.27 views

CVE-2021-24255 Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)

The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, both via a similar method...

5.4AI score0.0059EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/05/05 12:00 a.m.10 views

WordPress Essential Addons for Elementor Lite 跨站脚本漏洞

WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Essential Addons for Elementor Lite Plugin versions prior to 4.5.4. An attacker can exploit this vulnerability to launch a cross-site scripting attack...

5.4CVSS5.3AI score0.0059EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/05/05 12:00 a.m.11 views

WordPress Plus Addonsfor Elementor 跨站脚本漏洞

WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress The Plus Addons for Elementor Page Builder Lite Plugin versions prior to 2.0.6. An attacker can exploit this vulnerability to launch a cross-site scripting attack...

5.4CVSS5.3AI score0.0059EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2021/04/13 12:00 a.m.23 views

Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)

The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, both via a similar method. The “Progress Bar” widget accepts a “progressbartitlehtmltag” parameter. Although...

3.5CVSS1.5AI score0.0059EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder