Stored Cross-Site Scripting in Royal Addons for Elementor Countdown Widget

Skrevet den af i Royal Addons for Elementor

Royal Addons for Elementor up to and including 1.7.1001 copies the Countdown widget’s Redirect URL setting into the timer’s expire actions without URL sanitisation, and the front-end script assigns it to window.location.href when the timer expires. An authenticated attacker with Contributor-level access or above can store a javascript: URL there, so arbitrary script runs in the browser of every visitor who opens the page.

This vulnerability affects the following application versions:

  • Royal Addons for Elementor 1.0.0
  • Royal Addons for Elementor 1.1.0
  • Royal Addons for Elementor 1.2
  • Royal Addons for Elementor 1.3
  • Royal Addons for Elementor 1.3.1
  • Royal Addons for Elementor 1.3.2
  • Royal Addons for Elementor 1.3.21
  • Royal Addons for Elementor 1.3.22
  • Royal Addons for Elementor 1.3.23
  • Royal Addons for Elementor 1.3.24
  • Royal Addons for Elementor 1.3.25
  • Royal Addons for Elementor 1.3.26
  • Royal Addons for Elementor 1.3.27
  • Royal Addons for Elementor 1.3.28
  • Royal Addons for Elementor 1.3.29
  • Royal Addons for Elementor 1.3.30
  • Royal Addons for Elementor 1.3.31
  • Royal Addons for Elementor 1.3.32
  • Royal Addons for Elementor 1.3.33
  • Royal Addons for Elementor 1.3.34
  • Royal Addons for Elementor 1.3.35
  • Royal Addons for Elementor 1.3.36
  • Royal Addons for Elementor 1.3.37
  • Royal Addons for Elementor 1.3.38
  • Royal Addons for Elementor 1.3.39
  • Royal Addons for Elementor 1.3.40
  • Royal Addons for Elementor 1.3.41
  • Royal Addons for Elementor 1.3.42
  • Royal Addons for Elementor 1.3.43
  • Royal Addons for Elementor 1.3.44
  • Royal Addons for Elementor 1.3.45
  • Royal Addons for Elementor 1.3.46
  • Royal Addons for Elementor 1.3.47
  • Royal Addons for Elementor 1.3.48
  • Royal Addons for Elementor 1.3.49
  • Royal Addons for Elementor 1.3.50
  • Royal Addons for Elementor 1.3.51
  • Royal Addons for Elementor 1.3.52
  • Royal Addons for Elementor 1.3.53
  • Royal Addons for Elementor 1.3.54
  • Royal Addons for Elementor 1.3.55
  • Royal Addons for Elementor 1.3.56
  • Royal Addons for Elementor 1.3.57
  • Royal Addons for Elementor 1.3.58
  • Royal Addons for Elementor 1.3.59
  • Royal Addons for Elementor 1.3.60
  • Royal Addons for Elementor 1.3.61
  • Royal Addons for Elementor 1.3.62
  • Royal Addons for Elementor 1.3.63
  • Royal Addons for Elementor 1.3.64
  • Royal Addons for Elementor 1.3.65
  • Royal Addons for Elementor 1.3.66
  • Royal Addons for Elementor 1.3.67
  • Royal Addons for Elementor 1.3.68
  • Royal Addons for Elementor 1.3.69
  • Royal Addons for Elementor 1.3.70
  • Royal Addons for Elementor 1.3.71
  • Royal Addons for Elementor 1.3.72
  • Royal Addons for Elementor 1.3.73
  • Royal Addons for Elementor 1.3.74
  • Royal Addons for Elementor 1.3.75
  • Royal Addons for Elementor 1.3.76
  • Royal Addons for Elementor 1.3.77
  • Royal Addons for Elementor 1.3.78
  • Royal Addons for Elementor 1.3.79
  • Royal Addons for Elementor 1.3.80
  • Royal Addons for Elementor 1.3.81
  • Royal Addons for Elementor 1.3.82
  • Royal Addons for Elementor 1.3.83
  • Royal Addons for Elementor 1.3.84
  • Royal Addons for Elementor 1.3.85
  • Royal Addons for Elementor 1.3.86
  • Royal Addons for Elementor 1.3.87
  • Royal Addons for Elementor 1.3.88
  • Royal Addons for Elementor 1.3.89
  • Royal Addons for Elementor 1.3.90
  • Royal Addons for Elementor 1.3.91
  • Royal Addons for Elementor 1.3.92
  • Royal Addons for Elementor 1.3.93
  • Royal Addons for Elementor 1.3.94
  • Royal Addons for Elementor 1.3.95
  • Royal Addons for Elementor 1.3.96
  • Royal Addons for Elementor 1.3.97
  • Royal Addons for Elementor 1.3.971
  • Royal Addons for Elementor 1.3.972
  • Royal Addons for Elementor 1.3.973
  • Royal Addons for Elementor 1.3.974
  • Royal Addons for Elementor 1.3.975
  • Royal Addons for Elementor 1.3.976
  • Royal Addons for Elementor 1.3.977
  • Royal Addons for Elementor 1.3.978
  • Royal Addons for Elementor 1.3.979
  • Royal Addons for Elementor 1.3.980
  • Royal Addons for Elementor 1.3.981
  • Royal Addons for Elementor 1.3.982
  • Royal Addons for Elementor 1.3.983
  • Royal Addons for Elementor 1.3.984
  • Royal Addons for Elementor 1.3.985
  • Royal Addons for Elementor 1.3.986
  • Royal Addons for Elementor 1.3.987
  • Royal Addons for Elementor 1.7.1
  • Royal Addons for Elementor 1.7.1001

Stored DOM-based Cross-Site Scripting in Royal Addons for Elementor Google Maps Widget

Skrevet den af i Royal Addons for Elementor

Authenticated attackers with Contributor-level access or higher can inject arbitrary web scripts through the location title of the Google Maps widget. The title is passed to the info-window HTML without sufficient output encoding, so the script runs whenever a visitor opens a page containing the map.

This vulnerability affects the following application versions:

  • Royal Addons for Elementor 1.0.0
  • Royal Addons for Elementor 1.1.0
  • Royal Addons for Elementor 1.2
  • Royal Addons for Elementor 1.3
  • Royal Addons for Elementor 1.3.1
  • Royal Addons for Elementor 1.3.2
  • Royal Addons for Elementor 1.3.21
  • Royal Addons for Elementor 1.3.22
  • Royal Addons for Elementor 1.3.23
  • Royal Addons for Elementor 1.3.24
  • Royal Addons for Elementor 1.3.25
  • Royal Addons for Elementor 1.3.26
  • Royal Addons for Elementor 1.3.27
  • Royal Addons for Elementor 1.3.28
  • Royal Addons for Elementor 1.3.29
  • Royal Addons for Elementor 1.3.30
  • Royal Addons for Elementor 1.3.31
  • Royal Addons for Elementor 1.3.32
  • Royal Addons for Elementor 1.3.33
  • Royal Addons for Elementor 1.3.34
  • Royal Addons for Elementor 1.3.35
  • Royal Addons for Elementor 1.3.36
  • Royal Addons for Elementor 1.3.37
  • Royal Addons for Elementor 1.3.38
  • Royal Addons for Elementor 1.3.39
  • Royal Addons for Elementor 1.3.40
  • Royal Addons for Elementor 1.3.41
  • Royal Addons for Elementor 1.3.42
  • Royal Addons for Elementor 1.3.43
  • Royal Addons for Elementor 1.3.44
  • Royal Addons for Elementor 1.3.45
  • Royal Addons for Elementor 1.3.46
  • Royal Addons for Elementor 1.3.47
  • Royal Addons for Elementor 1.3.48
  • Royal Addons for Elementor 1.3.49
  • Royal Addons for Elementor 1.3.50
  • Royal Addons for Elementor 1.3.51
  • Royal Addons for Elementor 1.3.52
  • Royal Addons for Elementor 1.3.53
  • Royal Addons for Elementor 1.3.54
  • Royal Addons for Elementor 1.3.55
  • Royal Addons for Elementor 1.3.56
  • Royal Addons for Elementor 1.3.57
  • Royal Addons for Elementor 1.3.58
  • Royal Addons for Elementor 1.3.59
  • Royal Addons for Elementor 1.3.60
  • Royal Addons for Elementor 1.3.61
  • Royal Addons for Elementor 1.3.62
  • Royal Addons for Elementor 1.3.63
  • Royal Addons for Elementor 1.3.64
  • Royal Addons for Elementor 1.3.65
  • Royal Addons for Elementor 1.3.66
  • Royal Addons for Elementor 1.3.67
  • Royal Addons for Elementor 1.3.68
  • Royal Addons for Elementor 1.3.69
  • Royal Addons for Elementor 1.3.70
  • Royal Addons for Elementor 1.3.71
  • Royal Addons for Elementor 1.3.72
  • Royal Addons for Elementor 1.3.73
  • Royal Addons for Elementor 1.3.74
  • Royal Addons for Elementor 1.3.75
  • Royal Addons for Elementor 1.3.76
  • Royal Addons for Elementor 1.3.77
  • Royal Addons for Elementor 1.3.78
  • Royal Addons for Elementor 1.3.79
  • Royal Addons for Elementor 1.3.80
  • Royal Addons for Elementor 1.3.81
  • Royal Addons for Elementor 1.3.82
  • Royal Addons for Elementor 1.3.83
  • Royal Addons for Elementor 1.3.84
  • Royal Addons for Elementor 1.3.85
  • Royal Addons for Elementor 1.3.86
  • Royal Addons for Elementor 1.3.87
  • Royal Addons for Elementor 1.3.88
  • Royal Addons for Elementor 1.3.89
  • Royal Addons for Elementor 1.3.90
  • Royal Addons for Elementor 1.3.91
  • Royal Addons for Elementor 1.3.92
  • Royal Addons for Elementor 1.3.93
  • Royal Addons for Elementor 1.3.94
  • Royal Addons for Elementor 1.3.95
  • Royal Addons for Elementor 1.3.96
  • Royal Addons for Elementor 1.3.97
  • Royal Addons for Elementor 1.3.971
  • Royal Addons for Elementor 1.3.972
  • Royal Addons for Elementor 1.3.973
  • Royal Addons for Elementor 1.3.974
  • Royal Addons for Elementor 1.3.975
  • Royal Addons for Elementor 1.3.976
  • Royal Addons for Elementor 1.3.977
  • Royal Addons for Elementor 1.3.978
  • Royal Addons for Elementor 1.3.979
  • Royal Addons for Elementor 1.3.980
  • Royal Addons for Elementor 1.3.981
  • Royal Addons for Elementor 1.3.982
  • Royal Addons for Elementor 1.3.983
  • Royal Addons for Elementor 1.3.984
  • Royal Addons for Elementor 1.3.985
  • Royal Addons for Elementor 1.3.986
  • Royal Addons for Elementor 1.3.987
  • Royal Addons for Elementor 1.7.1
  • Royal Addons for Elementor 1.7.1001