The Advanced Tabs widget rendered repeater tab titles through a custom HTML allowlist that permitted , and inline style attributes, and additionally parsed shortcodes in them. An authenticated user with page-editing rights could store an iframe or auto-submitting form in a tab title and have it execute for every visitor of the page. Fixed by... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
Stored Cross-Site Scripting in Essential Addons for Elementor Advanced Tabs
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR