CVE-2024-2399

creationtimestamp| type| source ---|---|--- 2024-03-15 08:26:08+00:00| seen| https://t.me/ctinow/208496 2024-03-15 08:31:51+00:00| seen| https://t.me/ctinow/208504...

CVE-2024-2399

CVE-2024-2399 affects the Premium Addons for Elementor plugin for WordPress. It is a Stored XSS vulnerability via widget attributes caused by insufficient input sanitization and output escaping in versions up to and including 4.10.23. Exploitation requires an authenticated attacker with contribut...

WordPress Premium Addons for Elementor Plugin <= 4.10.23 is vulnerable to Cross Site Scripting (XSS)

Software Premium Addons for Elementor Type Plugin Vulnerable versions = 4.10.23 Fixed in 4.10.24 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2399 Patch priority Low CVSS severity Low 6.5 Developer LeapWorx PSID 5bd87070f423 Credits wesley wcraft...