Lucene search
+L

5 matches found

NVD
NVD
•added 2024/08/23 9:15 a.m.•31 views

CVE-2024-5502

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS0.00321EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2024/08/23 9:15 a.m.•10 views

CVE-2024-5502

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS6.1AI score0.00321EPSS
SaveExploits0References6
OSV
OSV
•added 2024/08/23 9:15 a.m.•19 views

CVE-2024-5502

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output escaping on user supplied...

5.4CVSS6AI score0.00321EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/08/23 12:00 a.m.•24 views

PT-2024-36461 · WordPress · Piotnet Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Piotnet Addons For Elementor plugin for WordPress versions 1.0 through 2.4.30 Description: The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and...

6.4CVSS5.9AI score0.00321EPSS
SaveExploits0References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/23 12:00 a.m.•2 views

CVE-2024-5502: Improper Neutralization of Input During Web Page Generation

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS6AI score0.00321EPSS
SaveExploits0References1
Rows per page
Query Builder