Gab

**Name of the Vulnerable Software and Affected Versions** Post in page for Elementor versions 1.0.1 and earlier **Description** The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows for DOM-Based XSS in Post in page for Elementor. **Recommendations** For Post in page for Elementor versions 1.0.1 and earlier, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** covertnine C9 Blocks versions 1.7.7 and earlier **Description** The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This is a type of Cross-site Scripting attack that occurs in the DOM, rather than being reflected from the server or stored on the server. **Recommendations** For versions 1.7.7 and earlier, update to a version that fixes the improper neutralization of input during web page generation to prevent DOM-Based XSS attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RSTheme RS Elements Elementor Addon versions 1.1.5 and earlier **Description** The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables an attacker to inject malicious scripts into a website, potentially affecting users who access the compromised page. **Recommendations** For RSTheme RS Elements Elementor Addon versions 1.1.5 and earlier, update to a version later than 1.1.5 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: SKT Blocks – Gutenberg based Page Builder versions 1.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting (XSS). This means an attacker could potentially inject malicious scripts into the website, affecting users who access the compromised pages. Recommendations: For SKT Blocks – Gutenberg based Page Builder versions 1.7 and earlier, update to a version later than 1.7 to resolve the issue. At the moment, there is no information about additional mitigation measures.

Name of the Vulnerable Software and Affected Versions: HashThemes Easy Elementor Addons versions n/a through 2.1.5 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means an attacker could potentially inject malicious scripts into the website, affecting users' sessions. Recommendations: For versions n/a through 2.1.5, update to a version later than 2.1.5 to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the website that use the Easy Elementor Addons until a patch is available.

**Name of the Vulnerable Software and Affected Versions** LucidLMS versions n/a through 1.0.5 **Description** The issue is an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS), which allows Reflected XSS. This can be exploited through reflected XSS, where an attacker can inject malicious code into a website, which is then reflected back to the user, potentially allowing the attacker to steal sensitive information or take control of the user's session. There is no information provided about whether this issue has been exploited by attackers or the number of Internet users that can be affected by its exploitation. **Recommendations** For LucidLMS versions n/a through 1.0.5, update to a version later than 1.0.5 to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable web pages or inputs to minimize the risk of exploitation. Avoid using user-supplied input in sensitive areas of the web application until the issue is resolved. At the moment, there is no additional information about other mitigation measures.

**Name of the Vulnerable Software and Affected Versions** Alpha Price Table For Elementor versions 1.0.8 and earlier **Description** The issue affects Alpha Price Table For Elementor, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This can lead to Cross-site Scripting. **Recommendations** For Alpha Price Table For Elementor versions 1.0.8 and earlier, update to a version later than 1.0.8 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Image Hover Effects for Elementor versions 1.0.2.3 and earlier **Description** The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting (XSS). This means an attacker can inject malicious scripts into the website, potentially affecting users who visit the site. **Recommendations** For versions 1.0.2.3 and earlier, update to a version later than 1.0.2.3 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** StorePlugin ShopElement versions prior to 2.0.0 **Description** The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting (XSS). This means that an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page. **Recommendations** For versions prior to 2.0.0, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting user input to prevent malicious script injection until a patch is available.

**Name of the Vulnerable Software and Affected Versions** WPMozo Addons Lite for Elementor versions 1.2.0 and earlier **Description** The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting (XSS). This means an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page. **Recommendations** For versions 1.2.0 and earlier, update to a version that fixes this issue, as the current version is affected by the stored XSS vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Debuggers Studio SaasPricing versions 1.1.4 and earlier **Description** The issue affects Debuggers Studio SaasPricing, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This enables Cross-site Scripting attacks. **Recommendations** For versions 1.1.4 and earlier, update to a version later than 1.1.4 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Coupon versions 1.2.1 and earlier **Description** The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject malicious scripts into the website, affecting users who interact with the compromised page. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include the vulnerability of the Coupon plugin to DOM-Based XSS. **Recommendations** For versions 1.2.1 and earlier, update to a version that contains a fix for this issue, as the current version is affected by the DOM-Based XSS vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Gutensee versions prior to 1.0.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject malicious scripts into the website, affecting users' sessions. Recommendations: For versions prior to 1.0.1, update to version 1.0.1 or later to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Hello Event Widgets For Elementor versions 1.0.2 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS), which allows DOM-Based XSS. This problem affects Christer Fernstrom Hello Event Widgets For Elementor, enabling potential attacks. Recommendations: For versions 1.0.2 and earlier, update to a version later than 1.0.2 to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable web pages generated by Hello Event Widgets For Elementor until a patch is available.

Name of the Vulnerable Software and Affected Versions: Best Wp Developer Advanced Blog Post Block versions 1.0.0 through 1.0.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions 1.0.0 through 1.0.4, update to a version later than 1.0.4 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Nias course versions 1.2.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS attacks. Recommendations: For versions 1.2.1 and earlier, update to a version that fixes this issue, however at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting user input to prevent malicious scripts from being injected into the webpage.

Name of the Vulnerable Software and Affected Versions: Zeshan B Quran Phrases About Most People Shortcodes versions 1.4 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS), which is a DOM-Based XSS vulnerability. This allows for the manipulation of the web page's content. Recommendations: For Zeshan B Quran Phrases About Most People Shortcodes versions 1.4 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Radius Blocks – WordPress Gutenberg Blocks versions n/a through 2.1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS attacks. Recommendations: For versions n/a through 2.1.2, update to a version later than 2.1.2 to resolve the issue. As a temporary workaround, consider restricting access to the Radius Blocks – WordPress Gutenberg Blocks plugin until a patch is available.

Name of the Vulnerable Software and Affected Versions: ABCBiz Addons and Templates for Elementor versions 2.0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Stored Cross-site Scripting (XSS) vulnerability. This vulnerability occurs during web page generation and allows for stored XSS attacks. Recommendations: For versions 2.0.2 and earlier, update to a version later than 2.0.2 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation. Avoid using potentially vulnerable templates or addons until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: Wot Elementor Widgets versions 1.0.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This means that an attacker could potentially inject malicious scripts into the website, affecting users who interact with the compromised web page. Recommendations: For versions 1.0.1 and earlier, update to version 1.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the website that utilize the Wot Elementor Widgets until the update can be applied.