CVE-2021-24351

The theplusmorepost AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected Cross-Site Scripting exploitable on both unauthenticated and authenticated users...

CVE-2021-24351

The CVE-2021-24351 entry corresponds to a reflected Cross-Site Scripting vulnerability in WordPress The Plus Addons for Elementor Page Builder plugin, affecting versions before 4.1.12. The issue arises in the theplus_more_post AJAX action, where some fields are not properly sanitized, allowing un...