CVE Database /
CVE-2022-47170
CVE · Medium
CVE-2022-47170 — Unlimited Elements For Elementor [unlimited-elements-for-elementor] < 1.5.49
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-47170
|
Unlimited Elements For Elementor [unlimited-elements-for-elementor] < 1.5.49 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.9
|
< 1.5.49
|
1.5.49 |
2023-01-27 |
—
|
CVE-2022-47170
The Unlimited Elements For Elementor plugin before version 1.5.49 contains a cross-site scripting vulnerability that could be exploited by an attacker to inject harmful scripts into a website. When visitors access the compromised site, these injected scripts could execute and perform malicious actions including redirecting users, displaying unauthorized advertisements, or executing arbitrary HTML code. The flaw was discovered by Muhammad Daffa and has been resolved in version 1.5.49 and later releases.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings