CVE

CVE-2021-24891

6.1

CVSS

Description

The Elementor Website Builder WordPress plugin before 3.4.8 does not sanitise or escape user input appended to the DOM via a malicious hash, resulting in a DOM Cross-Site Scripting issue.

Attack Vector

Privileges Req.

User Interaction

elementor website builder

Updated Oct 12, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2021-24891 Scanner

CVE-2021-24891 scanner - Cross-Site Scripting (XSS) vulnerability in Elementor Website Builder plugin for WordPress

Used 3.5k times · 3.4k assets checked · url

Scanner page →Run scanner

CVE history: elementor website builder

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →