CVE-2021-24260

The CVE-2021-24260 entry concerns the WordPress plugin Livemesh Addons for Elementor (before version 6.8). Connected data provide concrete details: multiple widgets expose stored XSS by low-privileged users (e.g., contributors) via insufficient sanitization in widget controls. Specific examples i...

CVE-2021-24260 Livemesh Addons for Elementor < 6.8 - Contributor+ Stored XSS

The “Livemesh Addons for Elementor” WordPress Plugin before 6.8 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...