CVE-2022-29455

[Nenad Zaric]

CVE-2022-29455

[Trickest Bot]

CVE-2022-29455

Description

DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions.

POC

Reference

• https://rotem-bar.com/hacking-65-million-websites-greater-cve-2022-29455-elementor

Github

• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/GULL2100/Wordpress_xss-CVE-2022-29455
• https://github.com/alyrezo/cve-2022-29455
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/p1ay8y3ar/cve_monitor