Lucene search

K
wpvulndbWpvulndbWPVDB-ID:B16773F0-998E-4D2E-B92D-35D06176A28C
HistoryNov 14, 2023 - 12:00 a.m.

Qi Addons For Elementor < 1.6.5 - Contributor+ Stored XSS

2023-11-1400:00:00
wpscan.com
9
plugin
validation
escape
parameters
contributor role
stored cross-site scripting

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

CPENameOperatorVersion
eq1.6.5

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

Related for WPVDB-ID:B16773F0-998E-4D2E-B92D-35D06176A28C