CVE-2023-47505

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor.Com Elementor allows Cross-Site Scripting (XSS).This issue affects Elementor: from n/a through 3.16.4.

• CWE-79

• https://patchstack.com/articles/arbitrary-attachment-render-to-xss-in-elementor-plugin?_s_id=cveExploit, Third Party Advisory
• https://patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-16-4-cross-site-scripting-xss-vulnerability?_s_id=cveThird Party Advisory
• https://patchstack.com/articles/arbitrary-attachment-render-to-xss-in-elementor-plugin?_s_id=cveExploit, Third Party Advisory
• https://patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-16-4-cross-site-scripting-xss-vulnerability?_s_id=cveThird Party Advisory

Published

Nov 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-47488Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2…6.1
• CVE-2023-47489CSV injection in export as csv in Combodo iTop v.3.1.0-2-119…7.8
• CVE-2023-4749A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-4750Use After Free in GitHub repository vim/vim prior to 9.0.185…7.8
• CVE-2023-47503An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attack…9.8
• CVE-2023-47504Improper Authentication vulnerability in Elementor Elementor…9.8
• CVE-2023-47506Improper Neutralization of Special Elements used in an SQL C…8.8
• CVE-2023-47507Deserialization of Untrusted Data vulnerability in Master Sl…9.8
• CVE-2023-47508Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1
• CVE-2023-47509Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1
• CVE-2023-4751Heap-based Buffer Overflow in GitHub repository vim/vim prio…7.8
• CVE-2023-47510Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1