PT-2024-15956 · WordPress · The Timeline Widget For Elementor
Craig Smith
+1
·
Published
2024-02-07
·
Updated
2024-02-14
·
CVE-2024-0977
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
The Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) plugin for WordPress versions up to, and including, 1.5.3
Description
The issue is related to Stored Cross-Site Scripting via image URLs in the plugin's timeline widget due to insufficient input sanitization and output escaping on user-supplied attributes. This allows authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page, changes the slideshow type, and then changes it back to an image.
Recommendations
For versions up to, and including, 1.5.3, update to a version higher than 1.5.3 to resolve the issue. As a temporary workaround, consider restricting access to the timeline widget for users with contributor-level and above permissions until a patch is available. Additionally, avoid using the plugin's timeline widget with image URLs from untrusted sources.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
The Timeline Widget For Elementor