CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
What the vulnerability does
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite.This issue affects ElementsReady Addons for Elementor: from n/a through 6.4.2.
Explanation of Vulnerability in Simple Terms
ElementsReady Addons for Elementor versions 6.4.2 and earlier contain an open redirect vulnerability. An attacker can craft a malicious link that redirects users to an external website after they interact with the plugin. The vulnerability requires user interaction and affects the scope beyond the plugin itself. Update to a version newer than 6.4.2 to resolve this issue.
What an attacker can do
Redirect site visitors to a malicious external website via a crafted link.
Potential impact on your site
Visitors could be redirected to phishing or malware sites, damaging site reputation and user trust.
Conditions required to exploit
Victim must click a malicious link; no authentication required.
Key dates
External resources
Related vulnerabilities
