Orbit Fox by ThemeIsle < 2.10.28 - Contributor+ Stored XSS

2024-01-1700:00:00

wpscan.com

vulnerable

cross-site scripting

input sanitization

output escaping

pricing table

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

20.2%

JSON

Description The plugin is vulnerable to Stored Cross-Site Scripting via the plugin’s Pricing Table Elementor Widget in all versions up to, and including, 2.10.27 due to insufficient input sanitization and output escaping on the user supplied link URL.