CVE-2022-29455: WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability
DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2022-29455.
What is the title of this vulnerability?
The title of this vulnerability is "DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin."
What is the description of this vulnerability?
The description of this vulnerability is "DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions."
What software is affected by this vulnerability?
The Elementor Website Builder plugin version <= 3.5.5 for WordPress is affected.
What is the severity of this vulnerability?
The severity of this vulnerability is medium, with a severity value of 6.1.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The Common Weakness Enumeration (CWE) ID for this vulnerability is CWE-79.
Is there a patch available for this vulnerability?
Yes, a patch is available for this vulnerability. Please refer to the provided references for more information.