CVE-2023-5381

CVE-2023-5381 – Elementor Addon Elements for WordPress is vulnerable to Stored XSS via admin settings in versions up to and including 1.12.7 due to insufficient input sanitization and output escaping. An attacker with administrator privileges can inject scripts that execute when users load inject...

WordPress Elementor Addon Elements Plugin <= 1.12.7 is vulnerable to Cross Site Scripting (XSS)

Software Elementor Addon Elements Type Plugin Vulnerable versions = 1.12.7 Fixed in 1.12.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5381 Patch priority Low CVSS severity Low 5.9 Developer WPVibes PSID 8f59b68c97f7 Credits Paolo Tresso Required...