CVE-2023-7044: Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom ID in all versions up to, and including, 5.9.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor access and higher to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-7044?
CVE-2023-7044 is classified as a high severity vulnerability due to its potential for Stored Cross-Site Scripting attacks.
How do I fix CVE-2023-7044?
To fix CVE-2023-7044, update the Essential Addons for Elementor plugin to version 5.9.3 or later, which includes the necessary security patch.
What versions are affected by CVE-2023-7044?
CVE-2023-7044 affects all versions of the Essential Addons for Elementor plugin up to and including version 5.9.2.
What type of attack does CVE-2023-7044 enable?
CVE-2023-7044 enables Stored Cross-Site Scripting attacks through insufficient input sanitization and output escaping.
Who is affected by CVE-2023-7044?
Users of the Essential Addons for Elementor plugin for WordPress, specifically those using versions up to 5.9.2, are affected by CVE-2023-7044.