medium5.4
CVE-2020-13864
The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS vulnerability.
Impact
The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS vulnerability. An author user can create posts that result in a stored XSS by using a crafted payload in custom links.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elementor | Elementor Page Builder | before 2.9.9 |