https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:26:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-282159 EUVD-2026-282159 https://cve.radiocsirt.org/vuln/euvd-2026-282159 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2091 <p>The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin&#39;s widgets in all versions up to, and including, 1.13.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> <p>The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin&#39;s widgets in all versions up to, and including, 1.13.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-2091 https://cve.radiocsirt.org/vuln/ghsa-pfj3-88wv-9pg5 <p>The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin&#39;s widgets in all versions up to, and including, 1.13.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> <p>The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin&#39;s widgets in all versions up to, and including, 1.13.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.</p> https://cve.radiocsirt.org/vuln/ghsa-pfj3-88wv-9pg5 https://cve.radiocsirt.org/vuln/gsd-2024-2091 gsd-2024-2091 https://cve.radiocsirt.org/vuln/gsd-2024-2091