medium5.4
CVE-2020-8426
The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page.
Impact
The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page. These can be exploited by targeting an authenticated user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elementor | Website Builder | before 2.8.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.impenetrable.tech/xss-in-wordpress-elementor-plugin
- https://wordpress.org/plugins/elementor/#developers
- https://wpvulndb.com/vulnerabilities/10051
- https://blog.impenetrable.tech/xss-in-wordpress-elementor-plugin
- https://wordpress.org/plugins/elementor/#developers
- https://wpvulndb.com/vulnerabilities/10051