Lucene search

K
patchstackStealthcopterPATCHSTACK:49653A85E459D1C65A4CF7D79F60E975
HistoryMay 27, 2024 - 12:00 a.m.

WordPress Primary Addon for Elementor Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)

2024-05-2700:00:00
stealthcopter
patchstack.com
wordpress
elementor
plugin
vulnerable version 1.5.5
fixed version 1.5.6
owasp top 10
cross-site scripting (xss)
cve-2024-5229
low priority
low severity
contributor privilege

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

Software

Primary Addon for Elementor

Type

Plugin

Vulnerable versions

<= 1.5.5

Fixed in

1.5.6

OWASP Top 10

A7: Cross-Site Scripting (XSS)

Classification

Cross Site Scripting (XSS)

CVE

CVE-2024-5229

Patch priority

Low

CVSS severity

Low (6.5)

Developer

Claim ownership

PSID

e45d83fa375c

Credits

stealthcopter

Required privilege

Contributor

Published

27 May, 2024

Vulnerability details

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
nicheaddonsevents_addon_for_elementorRange1.5.5wordpress
VendorProductVersionCPE
nicheaddonsevents_addon_for_elementor*cpe:2.3:a:nicheaddons:events_addon_for_elementor:*:*:*:*:*:wordpress:*:*

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

Related for PATCHSTACK:49653A85E459D1C65A4CF7D79F60E975