PT-2026-88870

CVE-2026-83541

Published

2026-09-09

Updated

2026-09-09

Description by

CVSS 3.1

6.8

Medium

MetricsAV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sina Extension for Elementor versions 3.7.1 through 3.10.3

Description Insufficient input sanitization and output escaping in a Table widget setting allow authenticated users with the Contributor role and above to perform Stored Cross-Site Scripting attacks. This occurs when the setting is output within an HTML attribute, enabling the injection of arbitrary web scripts that execute when a user accesses the affected page.

Recommendations Update Sina Extension for Elementor to version 3.10.4 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Dmitry Ignatyev

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers