Lenix Leads Collector
1 CVEs
product
Monthly
The Lenix Elementor Leads addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a URL form field in all versions up to, and including, 1.8.2 due to insufficient input. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
WordPress
XSS
Lenix Leads Collector
PHP
NVD
WPScan
CVSS 3.1
7.2
EPSS
0.4%
EPSS 0%
CVSS 7.2
HIGH
POC
PATCH
This Week
The Lenix Elementor Leads addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a URL form field in all versions up to, and including, 1.8.2 due to insufficient input. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
WordPress
XSS
Lenix Leads Collector
+1
NVD
WPScan