Threats tagged 'ghsa-x8v3-6454-g335'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.3%	CVE-2026-14841King Addons for Elementor (WordPress plugin) · Cross-Site Scripting (XSS) Medium6.1EPSS 0.3%2026-08-02CVE Database V5CVE-2026-14841 CVE-2026-14841 is a cross-site scripting (XSS) vulnerability in the King Addons for Elementor WordPress plugin before version 51.1.76. The plugin fails to properly escape a user-supplied grid setting before reflecting it into an HTML attribute in an unauthenticated AJAX response. This flaw allows attackers to execute arbitrary JavaScript in the browsers of visitors who load a crafted page. The vulnerability has a CVSS score of 6.1, indicating a medium severity level. EPSS 0.3%Vulnerability CWE-79 #ghsa-x8v3-6454-g335	CVE Database V5	2026-08-02

Page 1 of 1