PT-2022-3505 · Elementor · Elementor Website Builder

Rotem Bar · CVE-2022-29455 · Published 2022-06-13 · Updated 2024-09-01

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Elementor Website Builder plugin versions prior to 3.5.6

Description The issue is related to insufficient protection of the webpage structure, allowing a remote attacker to perform cross-site scripting. This is a DOM-based Reflected Cross-Site Scripting (XSS) vulnerability. It is estimated that over 6.5 million websites are potentially affected. The vulnerability can be exploited by manipulating the settings parameter in the /wp-content/plugins/elementor/assets/js/frontend.min.js endpoint, specifically using the elementor-action with action=lightbox and crafted settings to inject malicious scripts.

Recommendations For Elementor Website Builder plugin versions prior to 3.5.6, update the plugin to a version newer than 3.5.5 to resolve the issue. As a temporary workaround, consider restricting access to the /wp-content/plugins/elementor/assets/js/frontend.min.js endpoint until a patch is applied. Avoid using the settings parameter in the affected endpoint until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2022-04286

CVE-2022-29455

Affected Products

Elementor Website Builder

References · 18

• 🔥 https://github.com/akhilkoradiya/CVE-2022-29455 · Exploit
• 🔥 https://github.com/GULL2100/Wordpress_xss-CVE-2022-29455 · Exploit
• 🔥 https://rotem-bar.com/hacking-65-million-websites-greater-cve-2022-29455-elementor · Exploit
• https://osv.dev/vulnerability/CVE-2022-29455 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04286 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-29455 · Security Note
• https://patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-5-5-unauthenticated-dom-based-reflected-cross-site-scripting-xss-vulnerability · Note
• https://t.me/thebugbountyhunter/6308 · Telegram Post
• https://t.me/cibsecurity/44315 · Telegram Post
• https://twitter.com/hipdead010/status/1830407802763837809 · Twitter Post
• https://t.me/breachdetector/167931 · Telegram Post
• https://t.me/proxy_bar/1243 · Telegram Post
• https://t.me/poxek/2182 · Telegram Post
• https://t.me/pentestingnews/25950 · Telegram Post
• https://t.me/cybersecuritytechnologies/6344 · Telegram Post