QwikSec

Security Database

CVE

CWE

Training

CVE-2021-24351

Published: Jun 14, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected Cross-Site Scripting (exploitable on both unauthenticated and authenticated users)

Vendor	Product	Versions
Unknown	The Plus Addons for Elementor Page Builder	affected `4.1.12 - < 4.1.12`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/2ee62f85-7aea-4b7d-8b2d-5d86d9fb8016

x_refsource_CONFIRM

https://theplusaddons.com/changelog/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.