CVE-2024-3190

The Unlimited Elements For Elementor Free Widgets, Addons, Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's text field widget in all versions up to, and including, 1.5.107 due to insufficient input sanitization and output escaping on user supplied...

CVE-2024-3190

The CVE-2024-3190 entry concerns the Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin. A Stored Cross-Site Scripting (XSS) flaw exists in the text field widget due to insufficient input sanitization and output escaping on user-supplied attributes, affecting all ...