The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)
18Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 2.5%
probabilidade de exploração
2.5%top 17% das CVEs
exploração observada
nãonenhuma fonte reporta
The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected Cross-Site Scripting (exploitable on both unauthenticated and authenticated users)
Produtos afetados
Unknown · The Plus Addons for Elementor Page Builder