CVE-2022-0327

CVE-2022-0327 concerns the WordPress plugin Master Addons for Elementor (before 1.8.5). The flaw arises because the plugin does not sanitize/escape the error_message parameter when returning it in the response to the jltma_restrict_content AJAX action, which is accessible to both unauthenticated ...

WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress Master Addons for Elementor plugin versions prior to 1.8.5 contain a cross-site scripting vulnerability that stems from the plugin's...