Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-83547 1 Wordpress-extensions 1 Xpro Elementor Addons 2026-11-11 6.8 Medium
The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets' settings before outputting them within HTML attributes, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.