Lucene search

Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget

🗓️ 17 Mar 2021 00:00:00Reported by Ramuel GallType

Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget. The image box widget in the plugin accepts a ‘title_size’ parameter, allowing users with Contributor or above permissions to send a modified request containing JavaScript in the ‘title_size’ parameter

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2021-24206	5 Apr 202119:15	–	cve
wpexploit	Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget	17 Mar 202100:00	–	wpexploit
Prion	Design/Logic Flaw	5 Apr 202119:15	–	prion
Cvelist	CVE-2021-24206 Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget	5 Apr 202118:27	–	cvelist
NVD	CVE-2021-24206	5 Apr 202119:15	–	nvd

Vulners

Node

-elementorRange<3.1.4

Source	Link
wordfence	www.wordfence.com/blog/2021/03/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Mar 2021 00:00Current

0.3Low risk

Vulners AI Score0.3

EPSS0.001