Aller au contenu
Se connecter
6.1 Moyenne

CVE-2022-4710 The Royal Elementor Addons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and…

Description

The Royal Elementor Addons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.3.59, due to due to insufficient input sanitization and output escaping of the 'wpr_ajax_search_link_target' parameter in the 'data_fetch' function. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This is occurring because 'sanitize_text_field' is insufficient to prevent attribute-based Cross-Site Scripting

Produits et versions touchés

Produit Versions touchées Corrigé en
Royal Elementor Addons (Elementor Templates, Post Grid, Mega Menu & Header Footer Builder, WooCommerce Builder, Product Grid, Slider, Parallax Image & other Free Elementor Widgets) 1.3 premières → 1.3.59 Pas de correctif indiqué
Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.3 premières → 1.3.59 Pas de correctif indiqué

Autres CVE de Royal Elementor Addons (Elementor Templates, Post Grid, Mega Menu & Header Footer Builder, WooCommerce Builder, Product Grid, Slider, Parallax Image & other Free Elementor Widgets)

Les 11 CVE de Royal Elementor Addons (Elementor Templates, Post Grid, Mega Menu & Header Footer Builder, WooCommerce Builder, Product Grid, Slider, Parallax Image & other Free Elementor Widgets) →
CVE-2022-4707 The Royal Elementor Addons plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and… 4.3 Moyenne CVE-2022-4701 The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the… 4.3 Moyenne CVE-2022-4703 The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the… 4.3 Moyenne CVE-2022-4705 The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the… 4.3 Moyenne
Suivre cette CVE