Lucene search

K
wpvulndbWpvulndbWPVDB-ID:CAC59778-16A7-4B50-8A8C-6B8AD8EAA5A0
HistoryJan 26, 2024 - 12:00 a.m.

Exclusive Addons for Elementor < 2.6.9 - Contributor+ Stored XSS

2024-01-2600:00:00
wpscan.com
5
exclusive addons
elementor
plugin
2.6.9
stored xss
contributor
cross-site scripting
security vulnerability

AI Score

5.7

Confidence

High

EPSS

0

Percentile

14.0%

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin

AI Score

5.7

Confidence

High

EPSS

0

Percentile

14.0%

Related for WPVDB-ID:CAC59778-16A7-4B50-8A8C-6B8AD8EAA5A0