Vulnerabilities > Elementor > Elementor Page Builder > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-09-16 CVE-2020-20406 Cross-site Scripting vulnerability in Elementor Page Builder
A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions.
network
low complexity
elementor CWE-79
5.4
2020-06-05 CVE-2020-13865 Cross-site Scripting vulnerability in Elementor Page Builder
The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from multiple stored XSS vulnerabilities.
network
low complexity
elementor CWE-79
5.4
2020-06-05 CVE-2020-13864 Cross-site Scripting vulnerability in Elementor Page Builder
The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS vulnerability.
network
low complexity
elementor CWE-79
5.4
2019-10-07 CVE-2018-18379 Cross-site Scripting vulnerability in Elementor Page Builder
The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS.
network
low complexity
elementor CWE-79
6.1