Reflected Cross-Site Scripting Vulnerability in Royal Elementor Addons Plugin
CVE-2022-4710

6.1MEDIUM

Key Information:

Vendor
Wordpress
Status
Royal Elementor Addons (elementor Templates, Post Grid, Mega Menu & Header Footer Builder, WooCommerce Builder, Product Grid, Slider, Parallax Image & Other Free Elementor Widgets)
Vendor
CVE Published:
10 January 2023

Summary

The Royal Elementor Addons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping of the 'wpr_ajax_search_link_target' parameter in the 'data_fetch' function. This vulnerability allows unauthenticated attackers to execute arbitrary web scripts within affected pages by tricking users into clicking malicious links, exploiting the limitations of 'sanitize_text_field' in preventing attribute-based Cross-Site Scripting.

Affected Version(s)

Royal Elementor Addons (Elementor Templates, Post Grid, Mega Menu & Header Footer Builder, WooCommerce Builder, Product Grid, Slider, Parallax Image & other Free Elementor Widgets) * <= 1.3.59

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/royal-elemento...
https://www.wordfence.com/blog/2023/01/eleven-vulnerabili...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ramuel Gall
.