Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-24260 State: PUBLISHED Published: 2021-05-05T18:28:46 Last Updated: 2024-08-03T19:28:22.726Z Vendors: Unknown Products: Livemesh Addons for Elementor Problem Types: CWE-79 Description: The “Livemesh Addons for Elementor” WordPress Plugin before 6.8 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/fa6c7c7c-1027-4fa9-bb55-07ae2bb7f021
CVE ID: CVE-2021-24261 State: PUBLISHED Published: 2021-05-05T18:28:46 Last Updated: 2024-08-03T19:28:23.270Z Vendors: Unknown Products: HT Mega – Absolute Addons for Elementor Page Builder Problem Types: CWE-79 Description: The “HT Mega – Absolute Addons for Elementor Page Builder” WordPress Plugin before 1.5.7 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/0377705d-29e9-47db-a5bb-8acaf311a38f
CVE ID: CVE-2021-24262 State: PUBLISHED Published: 2021-05-05T18:28:46 Last Updated: 2024-08-03T19:28:22.703Z Vendors: Unknown Products: WooLentor – WooCommerce Elementor Addons + Builder Problem Types: CWE-79 Description: The “WooLentor – WooCommerce Elementor Addons + Builder” WordPress Plugin before 1.8.6 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/d6d16357-2bc3-4053-8274-d0275026e56b
CVE ID: CVE-2021-24263 State: PUBLISHED Published: 2021-05-05T18:28:46 Last Updated: 2024-08-03T19:28:22.655Z Vendors: Unknown Products: PowerPack Addons for Elementor Problem Types: CWE-79 Description: The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/48876006-b00f-49b7-80a1-b1d6dc2f4eec
CVE ID: CVE-2021-24264 State: PUBLISHED Published: 2021-05-05T18:28:46 Last Updated: 2024-08-03T19:28:22.758Z Vendors: Unknown Products: Image Hover Effects – Elementor Addon Problem Types: CWE-79 Description: The “Image Hover Effects – Elementor Addon” WordPress Plugin before 1.3.4 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/7fd89a49-fbb0-4308-836b-1f12dc585b1f
CVE ID: CVE-2021-24265 State: PUBLISHED Published: 2021-05-05T18:28:47 Last Updated: 2024-08-03T19:28:22.801Z Vendors: Unknown Products: Rife Elementor Extensions & Templates Problem Types: CWE-79 Description: The “Rife Elementor Extensions & Templates” WordPress Plugin before 1.1.6 has a widget that is vulnerable to stored Cross-Site Scripting(XSS) by lower-privileged users such as contributors, all via a similar method. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/9f4771dc-80b5-49ff-9f64-bf6c36f76863
CVE ID: CVE-2021-24266 State: PUBLISHED Published: 2021-05-05T18:28:47 Last Updated: 2024-08-03T19:28:22.635Z Vendors: Unknown Products: The Plus Addons for Elementor Page Builder Lite Problem Types: CWE-79 Description: The “The Plus Addons for Elementor Page Builder Lite” WordPress Plugin before 2.0.6 has four widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/78014ddd-1cc2-4723-8194-4bf478888578
CVE ID: CVE-2021-24267 State: PUBLISHED Published: 2021-05-05T18:28:47 Last Updated: 2024-08-03T19:28:22.699Z Vendors: Unknown Products: All-in-One Addons for Elementor – WidgetKit Problem Types: CWE-79 Description: The “All-in-One Addons for Elementor – WidgetKit” WordPress Plugin before 2.3.10 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/0c96f3a1-d192-481f-9035-5393f4aadc19
CVE ID: CVE-2021-24268 State: PUBLISHED Published: 2021-05-05T18:28:47 Last Updated: 2024-08-03T19:28:22.758Z Vendors: Unknown Products: JetWidgets For Elementor Problem Types: CWE-79 Description: The “JetWidgets For Elementor” WordPress Plugin before 1.0.9 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/68ecb965-2a9d-4e67-b069-c3dbfb14016b
CVE ID: CVE-2021-24269 State: PUBLISHED Published: 2021-05-05T18:28:47 Last Updated: 2024-08-03T19:28:22.788Z Vendors: Unknown Products: Sina Extension for Elementor Problem Types: CWE-79 Description: The “Sina Extension for Elementor” WordPress Plugin before 3.3.12 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/df953a91-f1d8-42e9-8966-f2012d4f97c9
CVE ID: CVE-2021-24270 State: PUBLISHED Published: 2021-05-05T18:28:47 Last Updated: 2024-08-03T19:28:22.694Z Vendors: Unknown Products: DethemeKit For Elementor Problem Types: CWE-79 Description: The “DeTheme Kit for Elementor” WordPress Plugin before 1.5.5.5 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/67967784-18b6-4e41-9597-3a4c051f3978
CVE ID: CVE-2021-24271 State: PUBLISHED Published: 2021-05-05T18:28:47 Last Updated: 2024-08-03T19:28:22.719Z Vendors: Unknown Products: Ultimate Addons for Elementor Problem Types: CWE-79 Description: The “Ultimate Addons for Elementor” WordPress Plugin before 1.30.0 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/1ce8e188-6ded-413e-b4d1-bf80258acf79
CVE ID: CVE-2021-24272 State: PUBLISHED Published: 2021-05-05T18:28:47 Last Updated: 2024-08-03T19:28:22.755Z Vendors: Unknown Products: fitness calculators Problem Types: CWE-352 Description: The fitness calculators WordPress plugin before 1.9.6 add calculators for Water intake, BMI calculator, protein Intake, and Body Fat and was lacking CSRF check, allowing attackers to make logged in users perform unwanted actions, such as change the calculator headers. Due to the lack of sanitisation, this could also lead to a Stored Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e643040b-1f3b-4c13-8a20-acfd069dcc4f - http://p
- CVE Program Container: References: - https://wpscan.com/vulnerability/e643040b-1f3b-4c13-8a20-acfd069dcc4f - http://packetstormsecurity.com/files/164261/WordPress-Fitness-Calculators-1.9.5-Cross-Site-Request-Forgery.html
CVE ID: CVE-2021-24273 State: PUBLISHED Published: 2021-05-05T18:28:47 Last Updated: 2024-08-03T19:28:22.714Z Vendors: CleverSoft Products: Clever Addons for Elementor Problem Types: CWE-79 Description: The “Clever Addons for Elementor” WordPress Plugin before 2.1.0 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/70ddb3fd-d819-4d85-9f8b-1451a3e3e5a6
CVE ID: CVE-2021-24274 State: PUBLISHED Published: 2021-05-05T18:28:48 Last Updated: 2024-08-03T19:28:22.822Z Vendors: Supsystic Products: Ultimate Maps by Supsystic Problem Types: CWE-79 Description: The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/200a3031-7c42-4189-96b1-bed9e0ab7c1d - http://packetstormsecurity.com/files/164316/WordPress-Ultimate-Maps-1.2.4-Cross-Site-Scripting.html
CVE ID: CVE-2021-24275 State: PUBLISHED Published: 2021-05-05T18:28:48 Last Updated: 2024-08-03T19:28:23.280Z Vendors: Supsystic Products: Popup by Supsystic Problem Types: CWE-79 Description: The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/efdc76e0-c14a-4baf-af70-9d381107308f - http://packetstormsecurity.com/files/164311/WordPress-Popup-1.10.4-Cross-Site-Scripting.html
CVE ID: CVE-2021-24276 State: PUBLISHED Published: 2021-05-05T18:28:48 Last Updated: 2024-08-03T19:28:23.251Z Vendors: Supsystic Products: Contact Form by Supsystic Problem Types: CWE-79 Description: The Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/1301123c-5e63-432a-ab90-3221ca532d9c - http://packetstormsecurity.com/files/164308/WordPress-Contact-Form-1.7.14-Cross-Site-Scripting.html
CVE ID: CVE-2021-24277 State: PUBLISHED Published: 2021-05-14T11:38:16 Last Updated: 2024-08-03T19:28:22.658Z Vendors: Flector Products: RSS for Yandex Turbo Problem Types: CWE-79 Description: The RSS for Yandex Turbo WordPress plugin before 1.30 did not properly sanitise the user inputs from its Счетчики settings tab before outputting them back in the page, leading to authenticated stored Cross-Site Scripting issues Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8ebf56be-46c0-4435-819f-dc30370eafa4
CVE ID: CVE-2021-24278 State: PUBLISHED Published: 2021-05-14T11:38:17 Last Updated: 2024-08-03T19:28:23.300Z Vendors: Query Solutions Products: Redirection for Contact Form 7 Problem Types: CWE-863 Description: In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce AJAX action to retrieve a valid nonce for any WordPress action/function. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/99f30604-d62b-4e30-afcd-b482f8d66413 - https://www.wordfence.com/blog/2021/04/severe-vulnerabilities-patched-in-redirection-for-contact-form-7-plugin/
CVE ID: CVE-2021-24279 State: PUBLISHED Published: 2021-05-14T11:38:17 Last Updated: 2024-08-03T19:28:22.645Z Vendors: Query Solutions Products: Redirection for Contact Form 7 Problem Types: CWE-863 Description: In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the import_from_debug AJAX action to install any plugin from the WordPress repository. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/severe-vulnerabilities-patched-in-redirection-for-contact-form-7-plugin/ - https://wpscan.com/vulnerability/75f7690d-7f6b-48a8-a9d1-95578a657920
CVE ID: CVE-2021-24280 State: PUBLISHED Published: 2021-05-14T11:38:17 Last Updated: 2024-08-03T19:28:23.438Z Vendors: Query Solutions Products: Redirection for Contact Form 7 Problem Types: CWE-502 Description: In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the import_from_debug AJAX action to inject PHP objects. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/severe-vulnerabilities-patched-in-redirection-for-contact-form-7-plugin/ - https://wpscan.com/vulnerability/db4ba6b0-887e-4ec1-8935-ab21d369b329
CVE ID: CVE-2021-24281 State: PUBLISHED Published: 2021-05-14T11:38:17 Last Updated: 2024-08-03T19:28:22.730Z Vendors: Query Solutions Products: Redirection for Contact Form 7 Problem Types: CWE-863 Description: In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the delete_action_post AJAX action to delete any post on a target site. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/severe-vulnerabilities-patched-in-redirection-for-contact-form-7-plugin/ - https://wpscan.com/vulnerability/daf12b85-f5ad-4261-ab39-be6840ad3cdc
CVE ID: CVE-2021-24282 State: PUBLISHED Published: 2021-05-14T11:38:17 Last Updated: 2024-08-03T19:28:22.813Z Vendors: Query Solutions Products: Redirection for Contact Form 7 Problem Types: CWE-863 Description: In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the various AJAX actions in the plugin to do a variety of things. For example, an attacker could use wpcf7r_reset_settings to reset the plugin’s settings, wpcf7r_add_action to add actions to a form, and more. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/severe-vulnerabilities-patched-in-redirection-for-
ogram Container: References: - https://www.wordfence.com/blog/2021/04/severe-vulnerabilities-patched-in-redirection-for-contact-form-7-plugin/ - https://wpscan.com/vulnerability/def87e69-bade-431b-b101-d463a26406e9
CVE ID: CVE-2021-24283 State: PUBLISHED Published: 2021-05-14T11:38:17 Last Updated: 2024-08-03T19:28:23.428Z Vendors: PickPlugins Products: Accordion Problem Types: CWE-79 Description: The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/6ccd9990-e15f-4800-b499-f7c74b480051
CVE ID: CVE-2021-24284 State: PUBLISHED Published: 2021-05-14T11:38:17 Last Updated: 2024-08-03T19:28:22.818Z Vendors: SayenThemes Products: Kaswara Modern VC Addons Problem Types: CWE-434 Description: The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fonts_icon directory with no checks for malicious files such as PHP. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8d66e338-a88f-4610-8d12-43e8be2da8c5 - https://codecanyon.net/item/kaswara-modern-visual-composer-addons/19341477 - ht
y/8d66e338-a88f-4610-8d12-43e8be2da8c5 - https://codecanyon.net/item/kaswara-modern-visual-composer-addons/19341477 - http://packetstormsecurity.com/files/167743/WordPress-Kaswara-Modern-WPBakery-Page-Builder-3.0.1-File-Upload.html
CVE ID: CVE-2021-24285 State: PUBLISHED Published: 2021-05-14T11:38:17 Last Updated: 2024-08-03T19:28:23.358Z Vendors: Unknown Products: Car Seller - Auto Classifieds Script Problem Types: CWE-89 Description: The request_list_request AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitise, validate or escape the order_id POST parameter before using it in a SQL statement, leading to a SQL Injection issue. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/f35d6ab7-dd52-48b3-a79c-3f89edf24162 - https://codevigilant.com/disclosure/2021/24-04-2
https://wpscan.com/vulnerability/f35d6ab7-dd52-48b3-a79c-3f89edf24162 - https://codevigilant.com/disclosure/2021/24-04-2021-wp-plugin-cars-seller-auto-classifieds-script-sql-injection/
CVE ID: CVE-2021-24286 State: PUBLISHED Published: 2021-05-14T11:38:18 Last Updated: 2024-08-03T19:28:23.443Z Vendors: Moove Agency Products: Redirect 404 to parent Problem Types: CWE-79 Description: The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/b9a535f3-cb0b-46fe-b345-da3462584e27 - http://packetstormsecurity.com/files/164328/WordPress-Redirect-404-To-Parent-1.3.0-Cross-Site-Scripting.html
CVE ID: CVE-2021-24287 State: PUBLISHED Published: 2021-05-14T11:38:18 Last Updated: 2024-08-03T19:28:23.464Z Vendors: Moove Agency Products: Select All Categories and Taxonomies, Change Checkbox to Radio Buttons Problem Types: CWE-79 Description: The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/56e1bb56-bfc5-40dd-b2d0-edef43d89bdf - http://packetstormsecurity.com/files/164327/WordPress-Select-All-Cat
ulnerability/56e1bb56-bfc5-40dd-b2d0-edef43d89bdf - http://packetstormsecurity.com/files/164327/WordPress-Select-All-Categories-And-Taxonomies-1.3.1-Cross-Site-Scripting.html
CVE ID: CVE-2021-24288 State: PUBLISHED Published: 2021-05-17T16:48:52 Last Updated: 2024-08-03T19:28:23.248Z Vendors: AcyMailing Products: Newsletter via SMTP, Sendinblue, Sendgrid, Mailgun - AcyMailing SMTP Newsletter Problem Types: CWE-601 Description: When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/56628862-1687-4862-9ed4-145d8dfbca97
CVE ID: CVE-2021-24289 State: PUBLISHED Published: 2021-05-17T16:48:52 Last Updated: 2024-08-03T19:28:23.205Z Vendors: Store Locator Plus Products: Store Locator Plus for WordPress Problem Types: CWE-269 Description: There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/078e93cd-7cf2-4e23-8171-58d44e354d62 - https://www.wordfence.com/blog/2021/04/severe-unpatched-vulnerabilities-leads-to-closure-of-store-locator-plus-plugin/
CVE ID: CVE-2021-24290 State: PUBLISHED Published: 2021-05-17T16:48:53 Last Updated: 2024-08-03T19:28:23.307Z Vendors: Store Locator Plus® Products: Store Locator Plus for WordPress Problem Types: CWE-79 Description: There are several endpoints in the Store Locator Plus for WordPress plugin through 5.5.15 that could allow unauthenticated attackers the ability to inject malicious JavaScript into pages. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/dc368484-f2fe-4c76-ba3d-e00e7f633719 - https://www.wordfence.com/blog/2021/04/severe-unpatched-vulnerabilities-leads-to-closure-of-store-locator-plus-plugin
CVE ID: CVE-2021-24291 State: PUBLISHED Published: 2021-05-14T11:38:18 Last Updated: 2024-08-03T19:28:23.495Z Vendors: Photo Gallery Team Products: Photo Gallery by 10Web – Mobile-Friendly Image Gallery Problem Types: CWE-79 Description: The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.69 was vulnerable to Reflected Cross-Site Scripting (XSS) issues via the gallery_id, tag, album_id and _id GET parameters passed to the bwg_frontend_data AJAX action (available to both unauthenticated and authenticated users) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/cfb982b2-8b6d-4345-b3ab-3d2b130b873a - https://pack
VE Program Container: References: - https://wpscan.com/vulnerability/cfb982b2-8b6d-4345-b3ab-3d2b130b873a - https://packetstormsecurity.com/files/162227/
CVE ID: CVE-2021-24292 State: PUBLISHED Published: 2021-05-17T16:48:53 Last Updated: 2024-08-03T19:28:23.390Z Vendors: weDevs Products: Happy Addons for Elementor, Happy Addons Pro for Elementor Problem Types: CWE-79 Description: The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting(XSS) by lower-privileged users such as contributors, all via a similar method: The “Card” widget accepts a “title_tag” parameter. Although the element control lists a fixed set of possible html tags, it is possible to send a ‘save_builder’ request with the “heading_tag
t control lists a fixed set of possible html tags, it is possible to send a ‘save_builder’ request with the “heading_tag” set to “script”, and the actual “title” parameter set to JavaScript to be executed within the script tags added by the “heading_tag” parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/ - https://wpscan.com/vulnerability/0f20e098-8106-451f-9448-d35a79f03077
CVE ID: CVE-2021-24293 State: PUBLISHED Published: 2021-05-05T18:28:48 Last Updated: 2024-08-03T19:28:22.816Z Vendors: Unknown Products: NextGen Gallery Pro Problem Types: CWE-79 Description: In the eCommerce module of the NextGEN Gallery Pro WordPress plugin before 3.1.11, there is an action to call get_cart_items via photocrati_ajax , after that the settings[shipping_address][name] is able to inject malicious javascript. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5e1a4725-3d20-44b0-8a35-bbf4263957f7 - https://www.imagely.com/wordpress-gallery-plugin/nextgen-pro/changelog/