The Countdown Timer widget outputs the “On Expiry Title” and “On Expiry Content” values directly into HTML data attributes without escaping or sanitization. An authenticated attacker with the ability to edit Elementor widgets (contributor role or above) can inject arbitrary JavaScript through these fields

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 1.2.6
  • ElementsKit Elementor Addons and Templates 1.2.7
  • ElementsKit Elementor Addons and Templates 1.2.9
  • ElementsKit Elementor Addons and Templates 1.3.1
  • ElementsKit Elementor Addons and Templates 1.3.2
  • ElementsKit Elementor Addons and Templates 1.3.3
  • ElementsKit Elementor Addons and Templates 1.3.4
  • ElementsKit Elementor Addons and Templates 1.3.5
  • ElementsKit Elementor Addons and Templates 1.3.8
  • ElementsKit Elementor Addons and Templates 1.3.9
  • ElementsKit Elementor Addons and Templates 1.4.0
  • ElementsKit Elementor Addons and Templates 1.4.1
  • ElementsKit Elementor Addons and Templates 1.4.2
  • ElementsKit Elementor Addons and Templates 1.4.3
  • ElementsKit Elementor Addons and Templates 1.4.4
  • ElementsKit Elementor Addons and Templates 1.4.5
  • ElementsKit Elementor Addons and Templates 1.4.8
  • ElementsKit Elementor Addons and Templates 1.4.9
  • ElementsKit Elementor Addons and Templates 1.5.0
  • ElementsKit Elementor Addons and Templates 1.5.1
  • ElementsKit Elementor Addons and Templates 1.5.2
  • ElementsKit Elementor Addons and Templates 1.5.4
  • ElementsKit Elementor Addons and Templates 1.5.5
  • ElementsKit Elementor Addons and Templates 1.5.6
  • ElementsKit Elementor Addons and Templates 1.5.7
  • ElementsKit Elementor Addons and Templates 1.5.8
  • ElementsKit Elementor Addons and Templates 1.5.9
  • ElementsKit Elementor Addons and Templates 1.5.10
  • ElementsKit Elementor Addons and Templates 1.5.11
  • ElementsKit Elementor Addons and Templates 1.5.12
  • ElementsKit Elementor Addons and Templates 2.0.0
  • ElementsKit Elementor Addons and Templates 2.0.1
  • ElementsKit Elementor Addons and Templates 2.0.2
  • ElementsKit Elementor Addons and Templates 2.0.3
  • ElementsKit Elementor Addons and Templates 2.0.4
  • ElementsKit Elementor Addons and Templates 2.0.5
  • ElementsKit Elementor Addons and Templates 2.0.6
  • ElementsKit Elementor Addons and Templates 2.0.7
  • ElementsKit Elementor Addons and Templates 2.0.8
  • ElementsKit Elementor Addons and Templates 2.0.9
  • ElementsKit Elementor Addons and Templates 2.0.9.1
  • ElementsKit Elementor Addons and Templates 2.0.9.2
  • ElementsKit Elementor Addons and Templates 2.0.9.3
  • ElementsKit Elementor Addons and Templates 2.0.10
  • ElementsKit Elementor Addons and Templates 2.0.11
  • ElementsKit Elementor Addons and Templates 2.0.12
  • ElementsKit Elementor Addons and Templates 2.0.13
  • ElementsKit Elementor Addons and Templates 2.1.0
  • ElementsKit Elementor Addons and Templates 2.1.1
  • ElementsKit Elementor Addons and Templates 2.1.2
  • ElementsKit Elementor Addons and Templates 2.1.3
  • ElementsKit Elementor Addons and Templates 2.1.4
  • ElementsKit Elementor Addons and Templates 2.1.5
  • ElementsKit Elementor Addons and Templates 2.1.6
  • ElementsKit Elementor Addons and Templates 2.1.7
  • ElementsKit Elementor Addons and Templates 2.2.0
  • ElementsKit Elementor Addons and Templates 2.2.1
  • ElementsKit Elementor Addons and Templates 2.2.2
  • ElementsKit Elementor Addons and Templates 2.2.3
  • ElementsKit Elementor Addons and Templates 2.2.4
  • ElementsKit Elementor Addons and Templates 2.3.0
  • ElementsKit Elementor Addons and Templates 2.3.1
  • ElementsKit Elementor Addons and Templates 2.3.1.1
  • ElementsKit Elementor Addons and Templates 2.3.2
  • ElementsKit Elementor Addons and Templates 2.3.3
  • ElementsKit Elementor Addons and Templates 2.3.4
  • ElementsKit Elementor Addons and Templates 2.3.5
  • ElementsKit Elementor Addons and Templates 2.3.6
  • ElementsKit Elementor Addons and Templates 2.3.7
  • ElementsKit Elementor Addons and Templates 2.4.0
  • ElementsKit Elementor Addons and Templates 2.5.0
  • ElementsKit Elementor Addons and Templates 2.5.1
  • ElementsKit Elementor Addons and Templates 2.5.2
  • ElementsKit Elementor Addons and Templates 2.5.3
  • ElementsKit Elementor Addons and Templates 2.5.4
  • ElementsKit Elementor Addons and Templates 2.5.5
  • ElementsKit Elementor Addons and Templates 2.5.6
  • ElementsKit Elementor Addons and Templates 2.5.7
  • ElementsKit Elementor Addons and Templates 2.5.8
  • ElementsKit Elementor Addons and Templates 2.5.9
  • ElementsKit Elementor Addons and Templates 2.5.10
  • ElementsKit Elementor Addons and Templates 2.6.0
  • ElementsKit Elementor Addons and Templates 2.6.1
  • ElementsKit Elementor Addons and Templates 2.6.2
  • ElementsKit Elementor Addons and Templates 2.6.3
  • ElementsKit Elementor Addons and Templates 2.7.0
  • ElementsKit Elementor Addons and Templates 2.7.2
  • ElementsKit Elementor Addons and Templates 2.7.3
  • ElementsKit Elementor Addons and Templates 2.7.4
  • ElementsKit Elementor Addons and Templates 2.7.5
  • ElementsKit Elementor Addons and Templates 2.8.0
  • ElementsKit Elementor Addons and Templates 2.8.1
  • ElementsKit Elementor Addons and Templates 2.8.5
  • ElementsKit Elementor Addons and Templates 2.8.6
  • ElementsKit Elementor Addons and Templates 2.8.7
  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0
  • ElementsKit Elementor Addons and Templates 3.2.1
  • ElementsKit Elementor Addons and Templates 3.2.2
  • ElementsKit Elementor Addons and Templates 3.3.3
  • ElementsKit Elementor Addons and Templates 3.3.4
  • ElementsKit Elementor Addons and Templates 3.3.5
  • ElementsKit Elementor Addons and Templates 3.3.6
  • ElementsKit Elementor Addons and Templates 3.3.7
  • ElementsKit Elementor Addons and Templates 3.3.8
  • ElementsKit Elementor Addons and Templates 3.3.9
  • ElementsKit Elementor Addons and Templates 3.4.0
  • ElementsKit Elementor Addons and Templates 3.4.1
  • ElementsKit Elementor Addons and Templates 3.4.2
  • ElementsKit Elementor Addons and Templates 3.4.3

Skriv et svar

Din e-mailadresse vil ikke blive publiceret. Krævede felter er markeret med *