241 matches found
CVE-2022-0327: Improper Neutralization of Input During Web Page Generation
The Master Addons for Elementor WordPress plugin before 1.8.5 does not sanitise and escape the errormessage parameter before outputting it back in the response of the jltmarestrictcontent AJAX action, available to unauthenticated and authenticated users, leading to a Reflected Cross-Site Scriptin...
6.1CVSS6.4AI score0.00795EPSS
SaveExploits2References2
20