Lucene search

K
patchstackNikolasPATCHSTACK:78C5EE3ACBA5D326F7C7EB1B7C659634
HistoryApr 10, 2024 - 12:00 a.m.

WordPress Element Pack Elementor Addons Plugin <= 5.5.3 is vulnerable to Cross Site Scripting (XSS)

2024-04-1000:00:00
Nikolas
patchstack.com
1
wordpress
element pack
elementor addons
plugin
cross site scripting
xss
vulnerable
version 5.5.3
fixed 5.5.4
owasp top 10
a7
cve-2024-1428
patch priority low
cvss severity low
developer
psid
credits nikolas
required privilege
contributor
published date

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

Software

Element Pack Elementor Addons

Type

Plugin

Vulnerable versions

<= 5.5.3

Fixed in

5.5.4

OWASP Top 10

A7: Cross-Site Scripting (XSS)

Classification

Cross Site Scripting (XSS)

CVE

CVE-2024-1428

Patch priority

Low

CVSS severity

Low (6.5)

Developer

Claim ownership

PSID

baacef610d60

Credits

Nikolas

Required privilege

Contributor

Published

10 April, 2024

Vulnerability details

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
bdthemeselement_packRange5.5.3litewordpress
VendorProductVersionCPE
bdthemeselement_pack*cpe:2.3:a:bdthemes:element_pack:*:*:*:*:lite:wordpress:*:*

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

Related for PATCHSTACK:78C5EE3ACBA5D326F7C7EB1B7C659634