Vulnerabilities > Wpmet > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-05-05 CVE-2021-24258 Cross-site Scripting vulnerability in Wpmet Elements KIT Elementor Addons
The Elements Kit Lite and Elements Kit Pro WordPress Plugins before 2.2.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.
network
low complexity
wpmet CWE-79
4.0