← voltar
CVE-2021-24258exploração observadaCWE-79

ElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSS

25Vexday Risk Score

Priorize a correção. Ela exploração observada pelo VulnCheck.

ssvc Attendepss 0.6%
da publicação à arma
Publicada no NVD5 de mai.
VulnCheck+624d
probabilidade de exploração
0.6%top 53% das CVEs
exploração observada
simVulnCheck
The Elements Kit Lite and Elements Kit Pro WordPress Plugins before 2.2.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.