1 matches found
CVE-2026-12141: Improper Neutralization of Input During Web Page Generation
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premiumtooltiptext' parameter in all versions up to, and including, 4.11.84 due to insufficient input sanitization and output escaping. This makes i...
4.9CVSS6.1AI score0.0029EPSS
SaveExploits0References2
20