6.8
Moyenne
CVE-2025-9698 The Plus Addons for Elementor WordPress plugin before 6.3.16 does not sanitize SVG file contents, which could allow…
Description
The Plus Addons for Elementor WordPress plugin before 6.3.16 does not sanitize SVG file contents, which could allow users with minimum role access as Author to perform Stored Cross-Site Scripting attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| The Plus Addons for Elementor 6.3 | premières → < 6.3.16 | 6.3.16 |