CVE-2022-0327

The Master Addons for Elementor WordPress plugin before 1.8.5 does not sanitise and escape the errormessage parameter before outputting it back in the response of the jltmarestrictcontent AJAX action, available to unauthenticated and authenticated users, leading to a Reflected Cross-Site Scriptin...

PT-2022-13107

Name of the Vulnerable Software and Affected Versions The Master Addons for Elementor WordPress plugin versions prior to 1.8.5 Description The issue arises from the lack of sanitization and escaping of the error message parameter in the response of the "jltma restrict content" AJAX action. This...