CVE-2021-24206: Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget
In the Elementor Website Builder WordPress plugin before 3.1.4, the image box widget (includes/widgets/image-box.php) accepts a ‘titlesize’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified ‘savebuilder’ request containing JavaScript in the ‘titlesize’ parameter, which is not filtered and is output without escaping. This JavaScript will then be executed when the saved page is viewed or previewed.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Elementor Website Builder WordPress plugin vulnerability?
The vulnerability ID for this Elementor Website Builder WordPress plugin vulnerability is CVE-2021-24206.
What is the severity level of CVE-2021-24206?
The severity level of CVE-2021-24206 is medium with a CVSS score of 5.4.
What is the affected software of CVE-2021-24206?
The affected software of CVE-2021-24206 is Elementor Website Builder WordPress plugin up to version 3.1.4.
What is the CWE category associated with CVE-2021-24206?
The CWE category associated with CVE-2021-24206 is CWE-79 (Cross-Site Scripting).
How can I fix the Elementor Website Builder WordPress plugin vulnerability (CVE-2021-24206)?
To fix the Elementor Website Builder WordPress plugin vulnerability (CVE-2021-24206), you should update to version 3.1.4 or later.