{"affected":[{"defaultStatus":"unaffected","product":"Dynific Addons for Elementor (formerly Anywhere Elementor)","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"1.3.1","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-117521","cwes":["CWE-79"],"description":"The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not escape a user-controlled profile value before outputting it in a quoted attribute in one of its Elementor widgets, allowing authenticated users with the Author role to store a payload that executes in the session of anyone, including an administrator, who views a post the attacker authored, resulting in Stored Cross-Site Scripting.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/783c1465-9e57-41ca-a6ec-14348d7ee9ad/"}],"kev":null,"metrics":[],"modifiedAt":1794376807628,"publishedAt":1794376807628,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/783c1465-9e57-41ca-a6ec-14348d7ee9ad/"}],"remediation":[],"revision":"00375f5283a92b3ca92580bd83061b61bba2bc26cf885239d6db684ab20e32f8","sources":[{"modifiedAt":1794376807628,"name":"CNA: WPScan","retrievedAt":1794377364711,"url":"https://www.cve.org/CVERecord?id=CVE-2026-117521"}],"ssvc":null,"status":"published","title":"Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Display Name in Post Author Widget","updatedAt":1794377364711}