title: The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)
description: The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected Cross-Site Scripting (exploitable on both unauthenticated and authenticated users)
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: The Plus Addons for Elementor Page Builder
vendor: Unknown
versions:
lessThan: 4.1.12, status: affected, version: 4.1.12, versionType: custom
}