CVE-2021-24273
Assigner: WPScan
Published: 2021-05-05T18:28:47
State: PUBLISHED
affected: product: Clever Addons for Elementor
vendor: CleverSoft
versions: lessThan: 2.1.0
status: affected
version: 2.1.0
versionType: custom
credits: value: Ramuel Gall
descriptions: value: The “Clever Addons for Elementor” WordPress Plugin before 2.1.0 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: UNKNOWN
title: Clever Addons for Elementor < 2.1.0 - Contributor+ Stored XSS
x_generator: WPScan CVE Generator