CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Reflected XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17.
Explanation of Vulnerability in Simple Terms
Piotnet Addons For Elementor Pro versions up to 7.1.17 contain a cross-site scripting vulnerability that allows attackers to inject malicious scripts into the site. An attacker can craft a malicious link that, when clicked by a site visitor, executes JavaScript in their browser. This can lead to session hijacking, credential theft, or malware distribution. Update to a version newer than 7.1.17.
What an attacker can do
Inject and execute malicious JavaScript in visitors' browsers via a crafted link.
Potential impact on your site
Visitors' sessions, credentials, or personal data could be compromised if they click a malicious link.
Conditions required to exploit
A site visitor must click an attacker-supplied link while logged in or visiting the site.
Key dates
External resources
Related vulnerabilities
