Unscored CVE-2020-8426 EUVD-2020-29293GHSA-xfg2-p674-2hcg

The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page. These can be …

Published Jan 28, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page. These can be exploited by targeting an authenticated user.

References

https://wordpress.org/plugins/elementor/#developers
https://blog.impenetrable.tech/xss-in-wordpress-elementor-plugin
https://wpvulndb.com/vulnerabilities/10051