{"title":"WordPress Elementor Website Builder plugin <= 3.21.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability","description":"Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Elementor Website Builder (versions <= 3.21.4)","affected_in":"<= 3.21.4","fixed_in":"3.22.0-beta2","references":[{"slug":"patchstack","label":"PatchStack","refs":[{"value":"wordpress-elementor-website-builder-plugin-3-21-4-authenticated-contributor-dom-based-stored-cross-site-scripting-vulnerability","label":"Details","link":"https:\/\/patchstack.com\/database\/vulnerability\/elementor\/wordpress-elementor-website-builder-plugin-3-21-4-authenticated-contributor-dom-based-stored-cross-site-scripting-vulnerability?_a_id=431"}]},{"slug":"cve","label":"CVE","refs":[{"value":"2024-4619","label":"2024-4619","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-4619"}]}],"type":{"label":"Cross Site Scripting (XSS)","slug":""},"id":"ps-18771","created_at":"2024-05-21T03:46:30+00:00","updated_at":"2024-05-21T03:46:30+00:00","published_at":"2024-05-21T03:46:11+00:00","score":6.5,"score_group":"","score_vector":"","is_exploited":false,"patched_in_ranges":[],"patch_priority":1}