CVE-2023-47505

MEDIUM 5.4CVE-2023-47505 · Published 30/11/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
website builder elementor	`≤ 3.16.4`	No fix yet

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor.Com Elementor allows Cross-Site Scripting (XSS).This issue affects Elementor: from n/a through 3.16.4.

References

patchstack.com/articles/arbitrary-attachment-render-to-xss-in-elementor-plugin · Exploit
patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-16-4-cross-site-scripting-xss-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free