{"title":"WordPress Essential Addons for Elementor plugin <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute vulnerability","description":"Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute vulnerability discovered by Ng\u00f4 Thi\u00ean An (ancorn_) in WordPress Plugin Essential Addons for Elementor (versions <= 5.9.14)","affected_in":"<= 5.9.14","fixed_in":"5.9.15","references":[{"slug":"patchstack","label":"PatchStack","refs":[{"value":"wordpress-essential-addons-for-elementor-plugin-5-9-14-authenticated-contributor-store-cross-site-scripting-via-widget-url-attribute-vulnerability","label":"Details","link":"https:\/\/patchstack.com\/database\/vulnerability\/essential-addons-for-elementor-lite\/wordpress-essential-addons-for-elementor-plugin-5-9-14-authenticated-contributor-store-cross-site-scripting-via-widget-url-attribute-vulnerability?_a_id=431"}]},{"slug":"cve","label":"CVE","refs":[{"value":"2024-3333","label":"2024-3333","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-3333"}]}],"type":{"label":"Cross Site Scripting (XSS)","slug":""},"id":"ps-17906","created_at":"2024-04-17T03:33:38+00:00","updated_at":"2024-04-17T03:33:38+00:00","published_at":"2024-04-17T03:33:27+00:00","score":6.5,"score_group":"","score_vector":"","is_exploited":false,"patched_in_ranges":[],"patch_priority":1}