Test ID:	1.3.6.1.4.1.25623.1.0.126557
Category:	Web application abuses
Title:	WordPress Elementor Website Builder Plugin < 3.16.5 XSS Vulnerability
Summary:	The WordPress plugin 'Elementor Website Builder' is prone to a; cross-site scripting (XSS) vulnerability.
Description:	Summary: The WordPress plugin 'Elementor Website Builder' is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: Improper neutralization of input during web page generation, leading to a cross-site scripting (XSS). Affected Software/OS: WordPress Elementor Website Builder plugin prior to version 3.16.5. Solution: Update to version 3.16.5 or later. CVSS Score: 5.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-47505 https://patchstack.com/articles/arbitrary-attachment-render-to-xss-in-elementor-plugin?_s_id=cve https://patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-16-4-cross-site-scripting-xss-vulnerability?_s_id=cve
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.