cve/2021/CVE-2021-24891.md
2025-09-29 21:09:30 +02:00

870 B

CVE-2021-24891

Description

The Elementor Website Builder WordPress plugin before 3.4.8 does not sanitise or escape user input appended to the DOM via a malicious hash, resulting in a DOM Cross-Site Scripting issue.

POC

Reference

Github