medium5.4
CVE-2020-15020
An issue was discovered in the Elementor plugin through 2.9.13 for WordPress.
Impact
An issue was discovered in the Elementor plugin through 2.9.13 for WordPress. An authenticated attacker can achieve stored XSS via the Name Your Template field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elementor | Website Builder | through 2.9.13 |
Weakness classification
References
- NVD record
- CVE.org record
- http://hidden-one.co.in/2020/07/07/cve-2020-1020-stored-xss-on-elementor-wordpress-plugin/
- https://wordpress.org/plugins/elementor/#developers
- http://hidden-one.co.in/2020/07/07/cve-2020-1020-stored-xss-on-elementor-wordpress-plugin/
- https://wordpress.org/plugins/elementor/#developers