Stored XSS in ElementsKit Elementor Addons WordPress Plugin

Executive Summary

This vulnerability is a stored Cross-Site Scripting (XSS) issue in the ElementsKit Elementor Addons WordPress plugin before version 3.10.01. It occurs because the plugin does not properly sanitize or escape certain megamenu menu-item settings before saving them or displaying them on the front end. Additionally, it does not require the unfiltered_html capability to save these settings.

Useful 0 Not Useful 0

Detection Guidance

Check if the ElementsKit Elementor Addons plugin version is below 3.10.01. Inspect WordPress admin capabilities for unfiltered_html access. Review stored megamenu settings for unsanitized JavaScript in the database.

Useful 0 Not Useful 0

Impact Analysis

An attacker with administrative access could exploit this to inject malicious JavaScript code. On a multisite network, a non-super subsite Administrator (who lacks unfiltered_html capability) could plant a stored XSS payload that executes when the network Super Admin or site visitors access the affected pages.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to stored Cross-Site Scripting (XSS) attacks, potentially exposing sensitive user data. For GDPR, this may result in unauthorized data access or processing, violating Article 32 (security of processing). Under HIPAA, it could compromise protected health information if exploited in healthcare environments.

Useful 0 Not Useful 0

Mitigation Strategies

Update the ElementsKit Elementor Addons plugin to version 3.10.01 or higher. Remove any suspicious megamenu settings containing JavaScript. Restrict administrative capabilities to prevent unauthorized script storage.

Useful 0 Not Useful 0