CVE-2023-47505

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

5.4MEDIUM

EPSS

4.8%

top 10.52%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Elementor.com Elementor Elementor Website Builder

Timeline

PublishedNov 30

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor.Com Elementor allows Cross-Site Scripting (XSS).This issue affects Elementor: from n/a through 3.16.4.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:LExploitability: 2.3 | Impact: 3.7

Affected Packages2 packages

▶NVDelementor/website_builder3.16.4

▶CVEListV5elementor.com/elementorn/a — 3.16.4

🔴Vulnerability Details

GHSA

GHSA-vvmr-c9c4-p325: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor↗2023-11-30

▶

CVEList

WordPress Elementor Website Builder Plugin <= 3.16.4 is vulnerable to Cross Site Scripting (XSS)↗2023-11-30

▶