Chairat Toraya

**Name of the Vulnerable Software and Affected Versions** Master Addons For Elementor versions prior to 3.1.1 **Description** The plugin is subject to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. Authenticated attackers with author-level access or higher can inject arbitrary web scripts into pages. This is achieved by bypassing UI-level restrictions and sending a crafted POST request to the endpoint "admin-ajax.php?action=elementor ajax" to manipulate the `jtlma custom js` page setting. The scripts execute whenever a user visits the affected page. **Recommendations** Update the plugin to a version later than 3.1.0. As a temporary mitigation, restrict author-level users from making POST requests to the "admin-ajax.php?action=elementor ajax" endpoint.

**Name of the Vulnerable Software and Affected Versions** CSS & JavaScript Toolbox versions prior to 12.0.6 **Description** The CSS & JavaScript Toolbox plugin for WordPress is susceptible to Stored Cross-Site Scripting through admin settings. Insufficient input sanitization and output escaping allows authenticated attackers with administrator-level permissions and above to inject arbitrary web scripts into pages. These scripts will execute when a user accesses the injected page. This issue only impacts multi-site installations and installations where unfiltered html has been disabled. **Recommendations** Update CSS & JavaScript Toolbox to version 12.0.6 or later.