CVE-2022-29455: WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability
First published: Mon Jun 13 2022(Updated: )
DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions.
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Elementor Website Builder WordPress | <=3.5.5 |
Remedy
Update to 3.5.6 or higher version.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2022-29455.
What is the title of this vulnerability?
The title of this vulnerability is "DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin."
What is the description of this vulnerability?
The description of this vulnerability is "DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions."
What software is affected by this vulnerability?
The Elementor Website Builder plugin version <= 3.5.5 for WordPress is affected.
What is the severity of this vulnerability?
The severity of this vulnerability is medium, with a severity value of 6.1.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The Common Weakness Enumeration (CWE) ID for this vulnerability is CWE-79.
Is there a patch available for this vulnerability?
Yes, a patch is available for this vulnerability. Please refer to the provided references for more information.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/remedy
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/softwarecombine
- agent/tags
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- vendor/elementor
- canonical/elementor website builder wordpress
- version/elementor website builder wordpress/3.5.5