Security for everyone

CVE-2021-24891 Scanner

Detects 'Cross-Site Scripting (XSS)' vulnerability in Elementor Website Builder plugin for WordPress affects v. before 3.4.8.

SCAN NOW

Short Info


Level

Medium

Single Scan

Single Scan

Can be used by

Asset Owner

Estimated Time

10 sec

Scan only one

Url

Toolbox

-

The Elementor Website Builder Wordpress Plugin is a popular tool used to create stunning websites. This plugin provides a simple drag-and-drop interface that helps users design and build their website layouts with ease. Millions of websites around the world are powered by the Elementor Website Builder Plugin.

However, recently, a security vulnerability was detected in the plugin. The vulnerability code is CVE-2021-24891. This vulnerability can be exploited to create a malicious hash that can be used to append user input. Unfortunately, the Elementor Website Builder Plugin does not sanitise or escape this input, resulting in a DOM cross-site scripting issue.

When exploited, the CVE-2021-24891 vulnerability can allow attackers to inject malicious code into websites using the plugin. Attackers can then use this code to steal sensitive information, such as login credentials or financial data, from unsuspecting users. The vulnerability can also be used to take control of the website and execute malicious activities.

At SecurityForEveryone.com, we offer pro features that help users quickly identify vulnerabilities in their digital assets. We believe that in today's world, proactive measures must be taken to protect digital assets from malicious actors. Our platform can scan for vulnerabilities and identify security gaps that need to be addressed, leaving you with peace of mind. Don't hesitate to try our services today to secure your digital assets.

 

REFERENCES

cyber security services for everyone one. Free security tools, continuous vulnerability scanning and many more.
Try it yourself,
control security posture