EUVD-2024-50088

Malicious code in bioql PyPI...

CVE-2024-3887

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Form Builder widget in all versions up to, and including, 1.3.974 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress Royal Elementor Addons and Templates plugin <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting via Form Builder Widget vulnerability discovered by zer0gh0st in WordPress Plugin Royal Elementor Addons versions = 1.7.1001...

CVE-2024-9682

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Form Builder widget in all versions up to, and including, 1.7.1001 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2024-9682 Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Form Builder widget in all versions up to, and including, 1.7.1001 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2024-9682

CVE-2024-9682: Royal Elementor Addons and Templates (WordPress) stores cross-site scripting via the Form Builder widget in all versions

PT-2024-39759 · WordPress · The Royal Elementor Addons/Templates

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons and Templates plugin for WordPress versions up to, and including, 1.7.1001 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Form Builder widget due to insufficient input sanitization...

CVE-2024-3887

CVE-2024-3887 affects the Royal Elementor Addons and Templates plugin for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) in the Form Builder widget caused by insufficient input sanitization and output escaping on user-supplied attributes. Impact: authenticated attackers with ...

WordPress Royal Elementor Addons and Templates plugin <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Form Builder Widget vulnerability discovered by Tim Coen, Ngô Thiên An ancorn - VNPT-VCI in WordPress Plugin Royal Elementor Addons versions = 1.3.974...