CVE-2024-25598

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Livemesh Livemesh Addons for Elementor allows Stored XSS.This issue affects Livemesh Addons for Elementor: from n/a through 8.3...

CVE-2024-25598

CVE-2024-25598 is a Stored XSS vulnerability in Livemesh Addons for Elementor (versions n/a–8.3). The issue stems from improper input handling leading to scripts being injected via the animated_text_class/related inputs and executed when pages load. Exploitation requires at least Contributor-leve...

WordPress Livemesh Addons for Elementor Plugin <= 8.3 is vulnerable to Cross Site Scripting (XSS)

Software Livemesh Addons for Elementor Type Plugin Vulnerable versions = 8.3 Fixed in 8.3.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-25598 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5327d62fbd79 Credits Khalid Yusuf Required...