Lucene search

CVE-2024-1428

🗓️ 06 Apr 2024 07:54:34Reported by WordfenceType

The Element Pack Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'element_pack_wrapper_link' attribute of the Trailer Box widget in versions up to 5.5.3 due to insufficient input sanitization and output escaping

Reporter	Title	Published	Views	Family All 6
WPVulnDB	Element Pack Elementor Addons < 5.5.4 - Contributor+ Stored XSS via Trailer Box Widget	8 Apr 202400:00	–	wpvulndb
NVD	CVE-2024-1428	6 Apr 202408:15	–	nvd
CVE	CVE-2024-1428	6 Apr 202408:15	–	cve
Vulnrichment	CVE-2024-1428	6 Apr 202407:34	–	vulnrichment
Patchstack	WordPress Element Pack Elementor Addons Plugin <= 5.5.3 is vulnerable to Cross Site Scripting (XSS)	10 Apr 202400:00	–	patchstack
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 1, 2024 to April 7, 2024)	11 Apr 202417:23	–	wordfence

[
  {
    "vendor": "bdthemes",
    "product": "Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows)",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "5.5.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/543c4d52-0e47-4bbb-b53e-dbe3f104734f
plugins	www.plugins.trac.wordpress.org/browser/bdthemes-element-pack-lite/tags/5.4.14/modules/trailer-box/widgets/trailer-box.php
plugins	www.plugins.trac.wordpress.org/changeset/3047402/bdthemes-element-pack-lite/trunk/modules/wrapper-link/module.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Apr 2024 07:34Current

5.8Medium risk

Vulners AI Score5.8

CVSS36.4

EPSS0.000