Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2025/03/04 8:23 a.m.23 views

CVE-2025-0433 Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.0.7.1 due to insufficient input sanitization and output...

6.4CVSS0.00273EPSS
SaveExploits0References5
CVE
CVE
added 2025/03/04 8:23 a.m.80 views

CVE-2025-0433

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations WordPress plugin is vulnerable to Stored Cross-Site Scripting via the id parameter in versions up to 2.0.7.1. Exploitation requires authentication at Contributor level or higher and can in...

6.4CVSS5.8AI score0.00273EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/04 8:23 a.m.11 views

CVE-2025-0433 Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.0.7.1 due to insufficient input sanitization and output...

6.4CVSS5.8AI score0.00273EPSS
SaveExploits0References5
Rows per page
Query Builder