CVE-2021-24266

The CVE-2021-24266 entry concerns The Plus Addons for Elementor Page Builder Lite WordPress plugin (pre-2.0.6). Affected component: four widgets (Accordion, Infobox, Heading animation, Hovercard) permit stored XSS by low-privilege users such as contributors via unsanitized input in fields process...

CVE-2021-24266 The Plus Addons for Elementor Page Builder Lite < 2.0.6 - Contributor+ Stored XSS

The “The Plus Addons for Elementor Page Builder Lite” WordPress Plugin before 2.0.6 has four widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...