CVE-2026-83541 — Sina Extension for Elementor 3.7.1 - 3.10.3 - Contributor+ Stored XSS via Table Widget

CVE-2026-83541

Sina Extension for Elementor 3.7.1 - 3.10.3 - Contributor+ Stored XSS via Table Widget PUBLISHED

Description (CNA)

The Sina Extension for Elementor WordPress plugin before 3.10.4 does not properly escape a Table widget setting before outputting it within an HTML attribute, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / Sina Extension for Elementor	affected 3.7.1 before 3.10.4

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/3bd0cd85-9fc2-4111-a626-cc4d8daa6977/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.