Prime Slider – Addons For Elementor vulnerabilities

The Prime Slider – Addons For Elementor plugin for WordPress has a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions from n/a through 4.6.2.

The Prime Slider plugin for Elementor up to version 4.1.10 contains a Stored XSS vulnerability via the 'follow_us_text' setting in the Mount widget. Insufficient input sanitization and output escaping allow attackers with author-level access or higher to inject arbitrary scripts.

The Prime Slider – Addons For Elementor plugin up to version 4.0.10 contains a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to send requests from the server to internal resources.