medium6.1
CVE-2021-24891
The Elementor Website Builder WordPress plugin before 3.4.8 does not sanitise or escape user input appended to the DOM via a malicious hash, resulting in a DOM…
Impact
The Elementor Website Builder WordPress plugin before 3.4.8 does not sanitise or escape user input appended to the DOM via a malicious hash, resulting in a DOM Cross-Site Scripting issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elementor | Website Builder | after 1.5.0 before 3.1.4 from 3.2.0 before 3.4.8 |