CVE-2022-4953
EUVD-2022-5220614.08.2023, 20:15
The Elementor Website Builder WordPress plugin before 3.5.5 does not filter out user-controlled URLs from being loaded into the DOM. This could be used to inject rogue iframes that point to malicious URLs.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| elementor | website_builder | 𝑥 < 3.5.5 |
𝑥
= Vulnerable software versions
References