WordPress Clever Addons for Elementor plugin <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple CAFE Widgets vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Multiple CAFE Widgets vulnerability discovered by Francesco Carlucci in WordPress Plugin Clever Addons for Elementor versions = 2.1.9...

CVE-2024-2350

The Clever Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the CAFE Icon, CAFE Team Member, and CAFE Slider widgets in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2024-19901 · WordPress · Clever Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Clever Addons for Elementor plugin for WordPress versions up to, and including, 2.1.9 Description: The issue is related to Stored Cross-Site Scripting via the CAFE Icon, CAFE Team Member, and CAFE Slider widgets due to insufficient input...