CVE-2024-12597

creationtimestamp| type| source ---|---|--- 2025-02-04 07:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdj5zwgmu27 2025-02-04 10:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4cvzdc2g 2025-02-06 02:40:47+00:00| seen|...

CVE-2024-12597

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blockcss' and 'innercss' parameters in all versions up to, and including, 2.7.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

CVE-2024-12597

CVE-2024-12597 (HT Mega – Absolute Addons For Elementor for WordPress) is a stored XSS vulnerability in the block_css and inner_css parameters, present in all versions up to 2.7.6. The issue requires authenticated access at Contributor level or higher and can cause arbitrary scripts to execute wh...