Master Addons for Elementor, CVE-2022-0327

CVE, Research URL: CVE-2022-0327
Home page URL: Security reports for Master Addons for Elementor
Application: Master Addons for Elementor
Published on: Mar 14, 2022
Research Description: The Master Addons for Elementor WordPress plugin before 1.8.5 does not sanitise and escape the error_message parameter before outputting it back in the response of the jltma_restrict_content AJAX action, available to unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting
Affected versions: Min -, max 2.0.4.
Status: vulnerable