CVE-2020-36703 (website_builder) | allinfosecnews.com

June 7, 2023, 2:15 a.m. |

National Vulnerability Database web.nvd.nist.gov

The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG image uploads in versions up to, and including 2.9.7 This makes it possible for authenticated attackers with the upload_files capability to inject arbitrary web scripts in pages that will execute whenever a user accesses the page with the stored web scripts.

attackers builder cross-site cve inject plugin scripting scripts svg vulnerable web website wordpress

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 6 months, 1 week ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 6 months, 1 week ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 6 months, 1 week ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 6 months, 1 week ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 6 months, 1 week ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 6 months, 1 week ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass check cve +10

Assistant Manager, IT Security

@ CIMB | Cambodia

View on infosec-jobs.com

IT Security Engineer - GRC

@ Xtremax | Bandung City, West Java, Indonesia

View on infosec-jobs.com

Senior Engineer - Application Security

@ ANZ Banking Group Limited | Quezon City, PH

View on infosec-jobs.com

Penetration Tester Manager

@ RSM | USA-IL-Chicago-30 South Wacker Drive, Suite 3300

View on infosec-jobs.com

Offensive Security Engineer, Device Wireless Connectivity

@ Google | Amsterdam, Netherlands

View on infosec-jobs.com

IT Security Analyst I

@ Mitsubishi Heavy Industries | Houston, TX, US, 77046

View on infosec-jobs.com