CVE-2020-20406

A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions

published September 16, 2020

CVSS
—
EPSS
1%
Percentile
52.7
In the wild
Unconfirmed
What it is

A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions. It is caused by inadequate filtering on the link custom attributes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00702 · 52.7th percentile
Published
2020-09-16T19:59Z
EPSS history
Timeline
  • 16 SEP 19:59Z
    A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions
    cvelistv5