title: Elementor - Header, Footer & Blocks Template < 1.5.8 - Contributor+ Stored XSS
description: The “Elementor – Header, Footer & Blocks Template” WordPress Plugin before 1.5.8 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Elementor – Header, Footer & Blocks Template
vendor: Unknown
versions:
lessThan: 1.5.8, status: affected, version: 1.5.8, versionType: custom
}