Phuoc Pham

**Name of the Vulnerable Software and Affected Versions** The Plus Addons for Elementor plugin for WordPress versions up to, and including, 5.4.2 **Description** The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the Age Gate widget, allowing authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages. These scripts will execute whenever a user accesses an injected page. **Recommendations** For versions up to, and including, 5.4.2, update to a version that addresses the insufficient input sanitization and output escaping issue in the Age Gate widget. As a temporary workaround, consider restricting access to the Age Gate widget for users with contributor-level access and above until a patch is available.

**Name of the Vulnerable Software and Affected Versions** The ShopLentor plugin for WordPress versions up to, and including, 2.8.4 **Description** The issue is related to Stored Cross-Site Scripting via the plugin's QR Code Widget due to insufficient input sanitization and output escaping on user-supplied attributes. This allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. **Recommendations** For versions up to, and including, 2.8.4, update to a version that addresses the insufficient input sanitization and output escaping issue to prevent Stored Cross-Site Scripting attacks. As a temporary workaround, consider restricting access to the QR Code Widget for users with contributor-level access and above until a patch is available.

**Name of the Vulnerable Software and Affected Versions** The Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce plugin for WordPress versions up to, and including, 2.6.3 **Description** The issue is related to Stored Cross-Site Scripting via the carousel widget due to insufficient input sanitization and output escaping on user-supplied attributes. This allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. **Recommendations** For versions up to, and including, 2.6.3, update to a version higher than 2.6.3 to resolve the issue. As a temporary workaround, consider restricting access to the carousel widget for users with contributor-level access and above until a patch is available. Additionally, ensure proper input validation and output escaping for all user-supplied attributes to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Sydney Toolbox plugin for WordPress versions up to, and including, 1.26 **Description** The issue is related to Stored Cross-Site Scripting via the ` id` attribute of widgets due to insufficient input sanitization and output escaping on user-supplied attributes. This allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. **Recommendations** For Sydney Toolbox plugin for WordPress versions up to, and including, 1.26, update to a version higher than 1.26 to resolve the issue. As a temporary workaround, consider restricting access to the ` id` attribute of widgets to minimize the risk of exploitation.