CVE-2021-25027: PowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site Scripting
Published Jan 3, 2022
·Updated
The PowerPack Addons for Elementor WordPress plugin before 2.6.2 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting issue
Affected Software
1 affected component
IdeaBox Powerpack Addons For Elementor Wordpress<2.6.2
Remediation
Patch Available
Event History
Jan 3, 2022
CVE Published
via MITRE·12:49 PM
Data Sourced
via MITRE·12:49 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-25027?
CVE-2021-25027 has a medium severity rating due to its potential to allow Reflected Cross-Site Scripting attacks.
2
How do I fix CVE-2021-25027?
To fix CVE-2021-25027, you should update the PowerPack Addons for Elementor plugin to version 2.6.2 or higher.
3
What software is affected by CVE-2021-25027?
CVE-2021-25027 affects the PowerPack Addons for Elementor WordPress plugin versions prior to 2.6.2.
4
What type of vulnerability is CVE-2021-25027?
CVE-2021-25027 is a Reflected Cross-Site Scripting vulnerability that arises from improper input handling.
5
Where can I find more information on CVE-2021-25027?
More information on CVE-2021-25027 can be found in security advisories and WordPress plugin change logs.