Filtered by vendor Themesgrove
Subscribe
Filtered by product All-in-one Addons For Elementor
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2024-37428 | 1 Themesgrove | 1 All-in-one Addons For Elementor | 2024-07-26 | N/A | 5.4 MEDIUM |
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themesgrove WidgetKit allows Stored XSS.This issue affects WidgetKit: from n/a through 2.5.0. | |||||
CVE-2021-24267 | 1 Themesgrove | 1 All-in-one Addons For Elementor | 2024-02-04 | 3.5 LOW | 5.4 MEDIUM |
The “All-in-One Addons for Elementor – WidgetKit” WordPress Plugin before 2.3.10 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. |