CVE-2024-1507

The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titletags' attribute of the Rubix widget in all versions up to, and including, 3.13.3 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2024-1507

CVE-2024-1507 covers a Stored Cross-Site Scripting in the Prime Slider – Addons For Elementor plugin for WordPress. Affected: Prime Slider (Revolution of a slider, Hero Slider, Ecommerce Slider) up to v3.13.2. Root cause: insufficient input sanitization and output escaping for the Rubix widget’s ...