A user with Contributor account can store JavaScript in a Simple Tab widget title, which ElementsKit renders unescaped on the front end. The script then runs for every visitor who views the page. Affects ElementsKit Lite 2.8.8 to 3.7.9. This vulnerability affects the following application versions: ElementsKit Elementor Addons and Templates 2.8.8... Weiterlesen: Stored Cross-Site Scripting in ElementsKit Simple Tab Widget
Intelligence View
⚡ tsecurity.de Intelligence
Stored Cross-Site Scripting in ElementsKit Simple Tab Widget
A user with Contributor account can store JavaScript in a Simple Tab widget title, which ElementsKit renders unescaped on the front end. The script then runs…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
War diese Seite hilfreich?