CVE-2021-24891 Scanner

The Elementor Website Builder Wordpress Plugin is a popular tool used to create stunning websites. This plugin provides a simple drag-and-drop interface that helps users design and build their website layouts with ease. Millions of websites around the world are powered by the Elementor Website Builder Plugin.

However, recently, a security vulnerability was detected in the plugin. The vulnerability code is CVE-2021-24891. This vulnerability can be exploited to create a malicious hash that can be used to append user input. Unfortunately, the Elementor Website Builder Plugin does not sanitise or escape this input, resulting in a DOM cross-site scripting issue.

When exploited, the CVE-2021-24891 vulnerability can allow attackers to inject malicious code into websites using the plugin. Attackers can then use this code to steal sensitive information, such as login credentials or financial data, from unsuspecting users. The vulnerability can also be used to take control of the website and execute malicious activities.

At s4e.io, we offer pro features that help users quickly identify vulnerabilities in their digital assets. We believe that in today's world, proactive measures must be taken to protect digital assets from malicious actors. Our platform can scan for vulnerabilities and identify security gaps that need to be addressed, leaving you with peace of mind. Don't hesitate to try our services today to secure your digital assets.

REFERENCES

• https://wpscan.com/vulnerability/fbed0daa-007d-4f91-8d87-4bca7781de2d
• https://www.jbelamor.com/xss-elementor-lightox.html