Cross site scripting

The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS...

CVE-2018-18379

The CVE-2018-18379 entry concerns the Elementor Pro WordPress plugin before version 2.0.10, where the elementor-edit-template class in wp-admin/customize.php enables cross-site scripting due to improper validation of client-side data. The vulnerability affects Elementor Pro on WordPress and is ex...

PT-2019-9588

Name of the Vulnerable Software and Affected Versions Elementor Pro plugin version prior to 2.0.10 Description The issue concerns a Cross-Site Scripting XSS problem in the Elementor Pro plugin for WordPress. Specifically, it affects the elementor-edit-template class in the wp-admin/customize.php...

CVE-2018-18379: Improper Neutralization of Input During Web Page Generation

The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS...