Lucene search

K
wpvulndbWpvulndbWPVDB-ID:374BB21F-80EE-4607-A545-FD9F69328656
HistoryMay 16, 2024 - 12:00 a.m.

SKT Addons for Elementor < 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Block

2024-05-1600:00:00
wpscan.com
1
wordpress
skt addons
stored xss
countdown block
security vulnerability

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

Description The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Block in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

CPENameOperatorVersion
eq1.9

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

Related for WPVDB-ID:374BB21F-80EE-4607-A545-FD9F69328656