Logo
Retour à la veille

CVE-2026-15787

Publié : 22 juillet 2026
Modifié : 22 juillet 2026
Lien officiel NVD
Score CVSS
6.4
MEDIUM

Description détaillée

The Ultimate Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. wp_kses_post, applied on save for users without unfiltered_html, does not neutralize HTML-entity-encoded payloads stored inside data-* attributes on kses-allowed elements, as the browser decodes these values client-side before jQuery .html() renders them as markup.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Références et Patchs

https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/2.8.8/inc/js/frontend.js#L682https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/2.8.8/inc/js/frontend.js#L684https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/2.8.8/inc/js/frontend.js#L701https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/2.8.8/inc/js/frontend.js#L703https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/2.9.1/inc/js/frontend.js#L682https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/2.9.1/inc/js/frontend.js#L684https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/2.9.1/inc/js/frontend.js#L701https://plugins.trac.wordpress.org/browser/header-footer-elementor/tags/2.9.1/inc/js/frontend.js#L703https://plugins.trac.wordpress.org/changeset/3614409/header-footer-elementor/trunk/inc/js/frontend.jshttps://plugins.trac.wordpress.org/changeset?old_path=%2Fheader-footer-elementor/tags/2.9.1&new_path=%2Fheader-footer-elementor/tags/2.9.2https://www.wordfence.com/threat-intel/vulnerabilities/id/39f26d35-a702-49fc-aed1-0a329ac32553?source=cve

Dernières Vulnérabilités

CVE-2026-63264

The Joomla extension JoomShopping is vulnerable to an reflected XSS vulnerability in the product frontend controller.

VOIR DÉTAILS

CVE-2026-2406

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through 12022026.

VOIR DÉTAILS

CVE-2026-63048

The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.

VOIR DÉTAILS