PT-2021-15805 · Unknown · Rife Elementor Extensions & Templates
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Rife Elementor Extensions & Templates versions prior to 1.1.6
Description
The issue concerns a stored Cross-Site Scripting (XSS) vulnerability. It can be exploited by lower-privileged users, such as contributors, using a similar method to inject malicious scripts.
Recommendations
For versions prior to 1.1.6, update to version 1.1.6 or later to resolve the issue.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Rife Elementor Extensions & Templates