CVE-2021-24256

CVE-2021-24256: Elementor - Header, Footer & Blocks Template < 1.5.8 - Contributor+ Stored XSS

Vendor Unknown
Product Elementor – Header, Footer & Blocks Template
Weakness CWE-79 · XSS
Published May 5, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The “Elementor – Header, Footer & Blocks Template” WordPress Plugin before 1.5.8 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.

Key dates

02Disclosure timeline

May 5, 2021 CVE published
August 3, 2024 Record updated