6 matches found
CVE-2024-13734
The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-13734
The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-13734
creationtimestamp| type| source ---|---|--- 2025-02-27 09:27:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5661 2025-02-27 12:52:29+00:00| seen| https://t.me/cvedetector/19032 2025-02-27 13:48:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj5zsonubx2y...
CVE-2024-13734
CVE-2024-13734 affects Card Elements for Elementor (WordPress) up to version 1.2.6. It is a stored XSS via the Profile Card widget, exploitable by authenticated users with contributor+ privileges due to insufficient input sanitization and output escaping. Impact: arbitrary script execution on pag...
CVE-2024-13734 Card Elements for Elementor <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Profile Card Widget
The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-13734 Card Elements for Elementor <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Profile Card Widget
The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...