EILMELDUNGEN LIVE
YouTube Security VideosNeil Patel: More Content Is Killing Your Rankings(31.10.2026 um 13:04 Uhr)
•
YouTube Security VideosGitHub: Security in 60 Seconds: Reachability Analysis for Dependabot(31.10.2026 um 14:00 Uhr)
•
Windows Tipps & SecurityHolding the power button doesn’t just force your PC off, Windows 11 quietly saves a crash dump for Microsoft first(31.10.2026 um 12:54 Uhr)
•
IT NachrichtenFinal Fantasy XIV: Evercold is delayed, shows off a new player Job, and more(31.10.2026 um 12:06 Uhr)
•
IT NachrichtenEA reportedly killed Mass Effect and BioWare to bet on Star Wars Battlefront 3 instead(31.10.2026 um 14:38 Uhr)
•
Windows Tipps & SecurityAn Halloween: Disney+ und Waipu.tv zusammen für 10,50 Euro statt 20,99 Euro (nur bis 1. November)(31.10.2026 um 13:28 Uhr)
•
Windows Tipps & SecurityMicrosoft Surface Laptop zum Tiefstpreis: Neues Modell mit Snapdragon X2 Elite jetzt 440 Euro günstiger(31.10.2026 um 13:57 Uhr)
•
Windows Tipps & SecurityWMF-Küchenschere im Angebot: Küchen-Bestseller bei Amazon Haul unter 8 Euro(31.10.2026 um 14:50 Uhr)
•
Videos & KonferenzenWBS LEGAL: 10.000 Euro Kopfgeld auf KuchenTV!(31.10.2026 um 14:01 Uhr)
•
Unix & Linux ServerMonthly News – October 2026(31.10.2026 um 14:32 Uhr)
•
YouTube Security VideosNeil Patel: More Content Is Killing Your Rankings(31.10.2026 um 13:04 Uhr)
•
YouTube Security VideosGitHub: Security in 60 Seconds: Reachability Analysis for Dependabot(31.10.2026 um 14:00 Uhr)
•
Windows Tipps & SecurityHolding the power button doesn’t just force your PC off, Windows 11 quietly saves a crash dump for Microsoft first(31.10.2026 um 12:54 Uhr)
•
IT NachrichtenFinal Fantasy XIV: Evercold is delayed, shows off a new player Job, and more(31.10.2026 um 12:06 Uhr)
•
IT NachrichtenEA reportedly killed Mass Effect and BioWare to bet on Star Wars Battlefront 3 instead(31.10.2026 um 14:38 Uhr)
•
Windows Tipps & SecurityAn Halloween: Disney+ und Waipu.tv zusammen für 10,50 Euro statt 20,99 Euro (nur bis 1. November)(31.10.2026 um 13:28 Uhr)
•
Windows Tipps & SecurityMicrosoft Surface Laptop zum Tiefstpreis: Neues Modell mit Snapdragon X2 Elite jetzt 440 Euro günstiger(31.10.2026 um 13:57 Uhr)
•
Windows Tipps & SecurityWMF-Küchenschere im Angebot: Küchen-Bestseller bei Amazon Haul unter 8 Euro(31.10.2026 um 14:50 Uhr)
•
Videos & KonferenzenWBS LEGAL: 10.000 Euro Kopfgeld auf KuchenTV!(31.10.2026 um 14:01 Uhr)
•
Unix & Linux ServerMonthly News – October 2026(31.10.2026 um 14:32 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Stored Cross-Site Scripting in ElementsKit Simple Tab Widget

A user with Contributor account can store JavaScript in a Simple Tab widget title, which ElementsKit renders unescaped on the front end. The script then runs…

Vulnerabilities (CVE) Vulnerability definition feed 1 Min. Lesezeit
Beitrag
0
Seite
0
↗ Quelle (Vulnerability definition feed)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

A user with Contributor account can store JavaScript in a Simple Tab widget title, which ElementsKit renders unescaped on the front end. The script then runs for every visitor who views the page. Affects ElementsKit Lite 2.8.8 to 3.7.9. This vulnerability affects the following application versions: ElementsKit Elementor Addons and Templates 2.8.8... Weiterlesen: Stored Cross-Site Scripting in ElementsKit Simple Tab Widget

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
2 Knoten · 1 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
No reader ratings yet
Was this page helpful?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Related story clusters & sources (vector AI)

22 sources
CVE-2024-13362 | WP Coupons and Deals Plugin on WordPress Parameter url cross site scripting
21 more sources
VulDB Updates2 hours agoCVE-2024-13362 | AidWP Plugin on WordPress Parameter url cross site scripting VulDB Updates2 hours agoCVE-2024-13362 | BlockSpare Plugin on WordPress Parameter url cross site scripting VulDB Updates2 hours agoCVE-2024-13362 | Mixed Media Gallery Blocks Plugin on WordPress Parameter url cross site scripting VulDB Updates2 hours agoCVE-2024-13362 | Advanced Classifieds & Directory Pro Plugin on WordPress Parameter url cross site scripting VulDB Updates2 hours agoCVE-2024-13362 | TablePress Plugin on WordPress Parameter url cross site scripting VulDB Updates2 hours agoCVE-2024-13362 | Pay for Post with WooCommerce Plugin on WordPress Parameter url cross site scripting
+15
7 sources
Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours
6 more sources
IT Security News1 hour agoTrojanized Claude Code Extension on Cursor Marketplace Exposes Users to SSH Backdoor Post malware and hostile se…1 day agoGitHub - HappyHackingSpace/claude-code-backdoor-check: Read-only scanner for the backdoored Claude Code 2.1.313 extension (Cursor marketplace, Oct 2026): SSH key, persistence, reverse tunnel. macOS + Linux. IT Security News6 hours agoHackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor GBHackers Security7 hours agoHackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor DEV Community7 hours agoClaude Code for VS Code 2.1.313 backdoor: how to check your machine and clean up Google Alert7 hours agoClaude-Code-Erweiterung im Cursor-Marktplatz mit Malware infiziert | heise online

Mehr aus dieser Kategorie

CVE-2024-13362 | WP Coupons and Deals Plugin on WordPress Parameter url cross site scripting
31.10.2026
CVE-2024-13362 | AidWP Plugin on WordPress Parameter url cross site scripting
31.10.2026
CVE-2024-13362 | BlockSpare Plugin on WordPress Parameter url cross site scripting
31.10.2026
CVE-2024-13362 | Mixed Media Gallery Blocks Plugin on WordPress Parameter url cross site scripting
31.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Pull to refresh
TTS Reader • tsecurity.de Voice
Nächster Beitrag