Lucene search

K
wpvulndbWpvulndbWPVDB-ID:096FFE18-7540-4763-A734-B0C40DFC4922
HistoryFeb 15, 2024 - 12:00 a.m.

PowerPack Addons for Elementor < 2.7.16 - Contributor+ Stored Cross-Site Scripting

2024-02-1500:00:00
wpscan.com
5
elementor
powerpack addons
cross-site scripting
contributor
twitter buttons widget

AI Score

5.9

Confidence

High

EPSS

0

Percentile

9.0%

Description The plugin does not properly sanitize its Twitter Buttons Widget setting, allowing users with at least the contributor role to conduct Stored XSS attacks.

AI Score

5.9

Confidence

High

EPSS

0

Percentile

9.0%

Related for WPVDB-ID:096FFE18-7540-4763-A734-B0C40DFC4922