WordPress Plugin Vulnerabilities

Elementor Website Builder < 3.20.3 - Contributor+ DOM Stored XSS

Description

The plugin is vulnerable to Stored Cross-Site Scripting via the plugin's Path Widget due to insufficient output escaping on user supplied attributes, allowingnauthenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Affects Plugins

Plugin icon
elementor
Fixed in 3.20.3

References

CVE
CVE-2024-2117
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/c8d7448a-b8a6-4b0b-92df-a15272fc56bf

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
5.9 (medium)

Miscellaneous

Original Researcher
Webbernaut
Verified
No
WPVDB ID
22e8d017-79f5-40c8-8a2c-e0ee42ba80c8

Timeline

Publicly Published
2024-03-26 (about 1 year ago)
Added
2024-03-27 (about 1 year ago)
Last Updated
2024-03-27 (about 1 year ago)

Other

Published
Title
Published
2024-10-31
Title
Simple Goods <= 0.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2014-08-01
Title
Better WP Security <= 3.5.3 - inc/secure.php logevent Function URL H&ling Stored XSS
Published
2025-02-23
Title
GDPR Cookie Compliance < 4.15.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Published
2024-07-10
Title
Master Popups <= 1.0.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Published
2024-12-13
Title
Contact Form Plugin by Fluent Forms < 5.2.7 - Unauthenticated Stored XSS via Form Subject