QwikSec

Security Database

CVE

CWE

Training

CVE-2022-0327

Published: Mar 14, 2022

Modified: Aug 2, 2024

PUBLISHED

Description

The Master Addons for Elementor WordPress plugin before 1.8.5 does not sanitise and escape the error_message parameter before outputting it back in the response of the jltma_restrict_content AJAX action, available to unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting

Vendor	Product	Versions
Unknown	Master Addons for Elementor	affected `1.8.5 - < 1.8.5`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/df38cc99-da3c-4cc0-b179-1e52e841b883

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.