CVE-2021-24891

creationtimestamp| type| source ---|---|--- 2021-11-23 22:21:05+00:00| seen| https://t.me/cibsecurity/32876 2022-08-13 21:02:10+00:00| published-proof-of-concept| https://t.me/poxek/2182 2023-04-27 09:58:59+00:00| confirmed|...

CVE-2021-24891 Elementor < 3.4.8 - DOM Cross-Site-Scripting

The Elementor Website Builder WordPress plugin before 3.4.8 does not sanitise or escape user input appended to the DOM via a malicious hash, resulting in a DOM Cross-Site Scripting issue...

CVE-2021-24891

The CVE-2021-24891 entry concerns the WordPress Elementor Website Builder plugin: versions prior to 3.4.8 contain a DOM-based XSS due to input being appended to the DOM without proper sanitization/escaping of a malicious hash. In practice, this can allow arbitrary JavaScript execution in the vict...