6.5 Medium

CVE-2025-49076 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through <= 6.2.7.

Affected products and versions

Product	Affected versions	Fixed in
The Plus Addons for Elementor Page Builder Lite 6.2	earliest → 6.2.7	No fix stated
The Plus Addons for Elementor Page Builder Lite 6.2	earliest → 6.2.7	No fix stated

The 2 CVEs of The Plus Addons for Elementor Page Builder Lite →

CVE-2026-116848 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH… 6.5 Medium

Do you use The Plus Addons for Elementor Page Builder Lite?

Track this CVE Watch The Plus Addons for Elementor Page Builder Lite Check my SBOMs

www.cveye.io/en/cve/CVE-2025-49076

Timeline

Published June 6, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2025-49076 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The…

Description

Affected products and versions

Other CVEs of The Plus Addons for Elementor Page Builder Lite