Cross site scripting

The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24257

The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24257

CVE-2021-24257 affects the WordPress plugin Premium Addons for Elementor prior to version 4.2.8. The issue is stored cross-site scripting (XSS) in multiple widgets accessible to low-privilege users (e.g., contributors). The OpenVAS and WPVulnDB entries provide concrete details, including widget-r...

CVE-2021-24257: Improper Neutralization of Input During Web Page Generation

The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

PT-2021-15797

Name of the Vulnerable Software and Affected Versions Premium Addons for Elementor versions prior to 4.2.8 Description The issue concerns stored Cross-Site Scripting XSS in several widgets of the plugin, which can be exploited by lower-privileged users such as contributors. The exploitation occur...

WordPress 插件跨站脚本漏洞

WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Premium Addons for Elementor Plugin versions prior to 4.2.8. An attacker can exploit this vulnerability to launch a cross-site scripting attack...

Premium Addons for Elementor < 4.2.8 - Contributor+ Stored Cross-Site Scripting (XSS)

The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method. The “Testimonials” widget accepts a “premiumtestimonialpersonnamesize” parameter...

WordPress Premium Addons for Elementor plugin <= 4.2.7 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered by WordFence in WordPress Premium Addons for Elementor plugin versions = 4.2.7. Solution Update the WordPress Premium Addons for Elementor plugin to the latest available version at least 4.2.8...