CVE-2024-5666

🗓️ 29 Jun 2024 07:02:15Reported by WordfenceType

The Elementor WordPress plugin is vulnerable to Stored Cross-Site Scripting via the 'url' parameter, allowing authenticated attackers to inject arbitrary web scripts

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2024-5666	29 Jun 202407:15	–	nvd
Cvelist	CVE-2024-5666 Extensions for Elementor <= 2.0.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter	29 Jun 202407:05	–	cvelist
Patchstack	WordPress Extensions for Elementor Plugin <= 2.0.30 is vulnerable to Cross Site Scripting (XSS)	1 Jul 202400:00	–	patchstack
Vulnrichment	CVE-2024-5666 Extensions for Elementor <= 2.0.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter	29 Jun 202407:05	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 24, 2024 to June 30, 2024)	3 Jul 202415:31	–	wordfence

Nvd

Vulners

Node

idioweb extensions_for_elementorRange<2.0.31wordpress

[
  {
    "vendor": "petesheppard84",
    "product": "Extensions for Elementor",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "2.0.30",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/extensions-for-elementor/trunk/modules/button/widgets/ee-button.php
wordpress	www.wordpress.org/plugins/extensions-for-elementor/
plugins	www.plugins.trac.wordpress.org/changeset/3104024/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/63306df3-4972-426f-bfda-6af75a09971c

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Jun 2024 07:15Current

5.5Medium risk

Vulners AI Score5.5

CVSS35.4 - 6.4

EPSS0.00026

SSVC

CWE-79