4 matches found
CVE-2024-52471
CVE-2024-52471 is a reflected XSS in the WordPress Extensions for Elementor plugin (vulnerable
CVE-2024-4868
CVE-2024-4868 concerns the WordPress plugin Extensions for Elementor (EE) with vulnerable EE Events and EE Flipbox widgets. The issue is stored XSS due to insufficient input sanitization and output escaping on user-supplied attributes in versions up to 2.0.31. Impact requires authentication at co...
CVE-2024-5666
CVE-2024-5666 affects Extensions for Elementor (WordPress) by vulnerability in the EE Button widget’s url parameter, enabling Stored XSS via insufficient input sanitization and output escaping. Affected versions: all up to and including 2.0.30. Exploitation requires authenticated access (Contribu...
CVE-2024-39668
CVE-2024-39668 concerns the WordPress plugin Extensions for Elementor (petesheppard84 Extensions for Elementor). The vulnerability is Stored XSS caused by improper neutralization of input during web page generation, affecting Extensions for Elementor versions up to 2.0.31. The exploit context is ...