CVE-2021-24265
Assigner: WPScan
Published: 2021-05-05T18:28:47
State: PUBLISHED
affected: product: Rife Elementor Extensions & Templates
vendor: Unknown
versions: lessThan: 1.1.6
status: affected
version: 1.1.6
versionType: custom
credits: value: Ramuel Gall
descriptions: value: The “Rife Elementor Extensions & Templates” WordPress Plugin before 1.1.6 has a widget that is vulnerable to stored Cross-Site Scripting(XSS) by lower-privileged users such as contributors, all via a similar method.
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: UNKNOWN
title: Rife Elementor Extensions & Templates < 1.1.6 - Contributor+ Stored XSS
x_generator: WPScan CVE Generator