Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:25 a.m.4 views

CVE-2024-3162

The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Widget Attributes in all versions up to, and including, 2.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributo...

6.5CVSS5.7AI score0.00286EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/04/30 12:0 a.m.2 views

The vulnerability of the Testimonial Widget Attributes component in the Jeg Elementor Kit plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Testimonial Widget Attributes component in the Jeg Elementor Kit plugin of the WordPress content management system is related to the lack of protective measures for website structures. Exploiting this vulnerability could allow a malicious actor to perform cross-site...

6.4CVSS7.5AI score0.00231EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/04/03 3:15 a.m.2 views

CVE-2024-3162

The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Widget Attributes in all versions up to, and including, 2.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributo...

5.4CVSS5.9AI score0.00231EPSS
Exploits0References2
NVD
NVD
added 2024/04/03 3:15 a.m.14 views

CVE-2024-3162

The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Widget Attributes in all versions up to, and including, 2.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributo...

6.4CVSS5.7AI score0.00231EPSS
Exploits0References2
Rows per page
Query Builder