CVE-2021-24273

The CVE-2021-24273 entry concerns the WordPress plugin “Clever Addons for Elementor” (versions before 2.1.0). Concrete details from connected sources show a Stored XSS vulnerability in multiple widgets that can be triggered by lower-privileged users (e.g., contributors) via a common method. Impac...

CVE-2021-24273 Clever Addons for Elementor < 2.1.0 - Contributor+ Stored XSS

The “Clever Addons for Elementor” WordPress Plugin before 2.1.0 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method...