{"affected":[{"defaultStatus":"unaffected","product":"Dynific Addons for Elementor (formerly Anywhere Elementor)","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"1.3.1","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-117522","cwes":["CWE-79"],"description":"The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not escape the post title before outputting it in a quoted HTML attribute in one of its Elementor widgets, allowing authenticated users with the Author role to publish a post whose title executes as script in the session of anyone, including an administrator, who views it, resulting in Stored Cross-Site Scripting.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/405f11c6-7d5f-48f8-a38c-c8b35870a22d/"}],"kev":null,"metrics":[],"modifiedAt":1794376807799,"publishedAt":1794376807799,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/405f11c6-7d5f-48f8-a38c-c8b35870a22d/"}],"remediation":[],"revision":"7929c95f21779ee5034d83b88fc7fcfb0378f620785b1ee3ca06cd16156a4cd9","sources":[{"modifiedAt":1794376807799,"name":"CNA: WPScan","retrievedAt":1794377365818,"url":"https://www.cve.org/CVERecord?id=CVE-2026-117522"}],"ssvc":null,"status":"published","title":"Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Post Title in Post Image Widget","updatedAt":1794377365818}