The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) WordPress plugin before 5.10.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Metrics
Affected Vendors & Products
References
History
Fri, 29 Nov 2024 16:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Element Pack Elementor Addons Wordpress
Element Pack Elementor Addons Wordpress element Pack Elementor Addons Wordpress |
|
Weaknesses | CWE-79 | |
CPEs | cpe:2.3:a:element_pack_elementor_addons_wordpress:element_pack_elementor_addons_wordpress:*:*:*:*:*:*:*:* | |
Vendors & Products |
Element Pack Elementor Addons Wordpress
Element Pack Elementor Addons Wordpress element Pack Elementor Addons Wordpress |
|
Metrics |
cvssV3_1
|
Thu, 28 Nov 2024 06:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) WordPress plugin before 5.10.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. | |
Title | Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS | |
References |
|
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2024-11-28T06:00:07.715Z
Updated: 2024-11-29T15:46:42.137Z
Reserved: 2024-10-29T14:04:37.956Z
Link: CVE-2024-10493
Vulnrichment
Updated: 2024-11-29T15:46:30.526Z
NVD
Status : Awaiting Analysis
Published: 2024-11-28T06:15:08.017
Modified: 2024-11-29T16:15:08.583
Link: CVE-2024-10493
Redhat
No data.