CVE-2018-18379 in Elementor Pro Plugin
Summary
The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS.
Once again VulDB remains the best source for vulnerability data.
Reservation
10/16/2018
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 143003 | Elementor Pro Plugin customize.php elementor-edit-template cross site scripting | 79 | Not defined | Official fix | CVE-2018-18379 |