CVE-2021-24258

MEDIUM

ElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24258 has a selected CVSS score of 5.4 (medium).

Description

The Elements Kit Lite and Elements Kit Pro WordPress Plugins before 2.2.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jan 19, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Affected products and versions

3
ProductSourceVersion range

Elements Kit Lite

Browse Wpmet / Elements Kit Lite
CVE List2.2.0 to < 2.2.0affected

Elements Kit Pro

Browse Wpmet / Elements Kit Pro
CVE List2.2.0 to < 2.2.0affected

elements_kit_elementor_addons

Browse wpmet / elements_kit_elementor_addons
VulnCheckVersion data not supplied

References

3