The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)
18Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 2.5%
probabilidad de explotación
2.5%top 17% de las CVE
explotación observada
noninguna fuente lo reporta
The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected Cross-Site Scripting (exploitable on both unauthenticated and authenticated users)
Productos afectados
Unknown · The Plus Addons for Elementor Page Builder