Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/04/01 6:52 a.m.25 views

CVE-2025-1512 PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The PowerPack Elementor Addons Free Widgets, Extensions and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Cursor Extension in all versions up to, and including, 2.9.0 due to insufficient input sanitization and output escaping. This makes it possible fo...

6.4CVSS0.00237EPSS
SaveExploits0References2
Rows per page
Query Builder