8168 matches found
CVE-2025-8360
CVE-2025-8360 : LA-Studio Element Kit for Elementor (WordPress) is vulnerable to Stored Cross-Site Scripting via multiple widgets. The root cause is insufficient input sanitization and output escaping on user-supplied attributes, enabling an authenticated attacker with contributor-level access or...
CVE-2025-8360 LA-Studio Element Kit for Elementor <= 1.5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's widgets in all versions up to, and including, 1.5.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...
WordPress LA-Studio Element Kit for Elementor plugin <= 1.5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Multiple Widgets vulnerability discovered by zer0gh0st in WordPress Plugin LA-Studio Element Kit for Elementor versions = 1.5.5.1...
CVE-2025-8360: Improper Neutralization of Input During Web Page Generation
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's widgets in all versions up to, and including, 1.5.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...
PT-2025-36350
Name of the Vulnerable Software and Affected Versions: LA-Studio Element Kit for Elementor plugin for WordPress versions up to and including 1.5.5.1 Description: The LA-Studio Element Kit for Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting through multiple widgets. Th...
WordPress plugin LA-Studio Element Kit for Elementor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2025-58064
CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. ckeditor5 and ckeditor5-clipboard versions 46.0.0 through 46.0.2 and 44.2.0 through 45.2.1 contain a Cross-Site Scripting XSS vulnerability. Ability to exploit could be triggered by a specific user action leading to...
Malicious code in yakutsk-airbnb-webpack-element-ui (npm)
The package yakutsk-airbnb-webpack-element-ui was found to contain malicious code...
Malicious code in element-ui-cryptography-gravity-quito (npm)
The package element-ui-cryptography-gravity-quito was found to contain malicious code...
Malicious code in yildun-element-ui-phoebe-protractor (npm)
The package yildun-element-ui-phoebe-protractor was found to contain malicious code...
MAL-2025-44129 Malicious code in element-ui-xenon-uranology-bunyan (npm)
The package element-ui-xenon-uranology-bunyan was found to contain malicious code...
Malicious code in aldebaran-sirius-umbriel-element-ui (npm)
The package aldebaran-sirius-umbriel-element-ui was found to contain malicious code...
MAL-2025-44127 Malicious code in element-ui-cryptography-gravity-quito (npm)
The package element-ui-cryptography-gravity-quito was found to contain malicious code...
Malicious code in element-ui-public-publish-sync (npm)
The package element-ui-public-publish-sync was found to contain malicious code...
Malicious code in sagitta-html-webpack-plugin-element-ui-fomalhaut (npm)
The package sagitta-html-webpack-plugin-element-ui-fomalhaut was found to contain malicious code...
MAL-2025-45945 Malicious code in sagitta-html-webpack-plugin-element-ui-fomalhaut (npm)
The package sagitta-html-webpack-plugin-element-ui-fomalhaut was found to contain malicious code...
MAL-2025-46790 Malicious code in yildun-element-ui-phoebe-protractor (npm)
The package yildun-element-ui-phoebe-protractor was found to contain malicious code...
MAL-2025-43428 Malicious code in aldebaran-sirius-umbriel-element-ui (npm)
The package aldebaran-sirius-umbriel-element-ui was found to contain malicious code...