Lucene search

CVE-2024-5215

🗓️ 26 Jun 2024 07:11:15Reported by [email protected]Type

Vulnerability in HT Mega – Absolute Addons For Elementor plugin for WordPress

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2024-5215 HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets	26 Jun 202406:56	–	cvelist
Vulnrichment	CVE-2024-5215 HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets	26 Jun 202406:56	–	vulnrichment
CVE	CVE-2024-5215	26 Jun 202407:15	–	cve
Patchstack	WordPress HT Mega Plugin <= 2.5.5 is vulnerable to Cross Site Scripting (XSS)	26 Jun 202400:00	–	patchstack
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 24, 2024 to June 30, 2024)	3 Jul 202415:31	–	wordfence

Nvd

Node

hasthemes ht_megaRange<2.5.6freewordpress

Source	Link
wordpress	www.wordpress.org/plugins/ht-mega-for-elementor/
plugins	www.plugins.trac.wordpress.org/browser/ht-mega-for-elementor/trunk/includes/widgets/htmega_user_register_form.php
plugins	www.plugins.trac.wordpress.org/browser/ht-mega-for-elementor/trunk/includes/widgets/htmega_videoplayer.php
plugins	www.plugins.trac.wordpress.org/changeset/3106524/
plugins	www.plugins.trac.wordpress.org/browser/ht-mega-for-elementor/trunk/includes/widgets/htmega_user_login_form.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/86dfdc4f-1cc2-4b0d-b79c-bee3d6956eb4

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Jun 2024 07:15Current

CVSS35.4 - 6.4

EPSS0.00039

CWE-79

cve-2024-5215; stored cross-site scripting; input sanitization