Vulnerabilities > Livemeshelementor

DATE	CVE	VULNERABILITY TITLE	RISK
2022-12-12	CVE-2022-3862	Unspecified vulnerability in Livemeshelementor Addons for Elementor The Livemesh Addons for Elementor WordPress plugin before 7.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). network low complexity livemeshelementor	4.8
2021-05-05	CVE-2021-24260	Cross-site Scripting vulnerability in Livemeshelementor Addons for Elementor The “Livemesh Addons for Elementor” WordPress Plugin before 6.8 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. network livemeshelementor CWE-79	3.5

Vulnerabilities > Livemeshelementor {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Livemeshelementor"}]}