{"title":"WordPress Royal Elementor Addons and Templates plugin <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes vulnerability","description":"Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes vulnerability discovered by stealthcopter in WordPress Plugin Royal Elementor Addons (versions <= 1.3.971)","affected_in":"<= 1.3.971","fixed_in":"1.3.972","references":[{"slug":"patchstack","label":"PatchStack","refs":[{"value":"wordpress-royal-elementor-addons-and-templates-plugin-1-3-971-authenticated-contributor-stored-cross-site-scripting-via-flip-carousel-flip-box-post-grid-and-taxonomy-list-widget-attributes-vulnerability","label":"Details","link":"https:\/\/patchstack.com\/database\/vulnerability\/royal-elementor-addons\/wordpress-royal-elementor-addons-and-templates-plugin-1-3-971-authenticated-contributor-stored-cross-site-scripting-via-flip-carousel-flip-box-post-grid-and-taxonomy-list-widget-attributes-vulnerability?_a_id=431"}]},{"slug":"cve","label":"CVE","refs":[{"value":"2024-3675","label":"2024-3675","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-3675"}]}],"type":{"label":"Cross Site Scripting (XSS)","slug":""},"id":"ps-18074","created_at":"2024-04-23T02:55:00+00:00","updated_at":"2024-04-23T02:55:00+00:00","published_at":"2024-04-23T02:54:48+00:00","score":6.5,"score_group":"","score_vector":"","is_exploited":false,"patched_in_ranges":[],"patch_priority":1}