CVE-2021-24263

The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...

CVE-2021-24263

CVE-2021-24263 affects the WordPress plugin “Elementor Addons – PowerPack Addons for Elementor” prior to version 2.3.2. Concrete details from connected sources show multiple widgets (e.g., Advanced accordion, Counter, and others) are vulnerable to stored XSS by low-privilege users such as contrib...

CVE-2021-24263 PowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSS

The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...