CVE-2022-29455

CVE-2022-29455 Vulnerabilità di Wordpress - XSS Cross-Site Scripting Posizione della vulnerabilità https://add your target here/wp-content/plugins/elementor/assets/js/frontend.min.js Versione vulnerabile Esempio - https://www.youtube.com/watch?v=4qvOkSbhcE...

Elementor < 3.5.6 - DOM Reflected Cross-Site Scripting

The plugin does not sanitise and escape user input appended to the DOM via malicious Lightbox settings, resulting in a DOM Cross-Site Scripting issue PoC...