CVE-2024-2750

CVE-2024-2750 affects Exclusive Addons for Elementor (WordPress). A Stored XSS via the Button widget URL parameter exists in all versions up to 2.6.9.3 due to insufficient input sanitization/output escaping. Authenticated attackers with contributor+ privileges can inject scripts executed when use...

WordPress Exclusive Addons Elementor Plugin <= 2.6.9.3 is vulnerable to Cross Site Scripting (XSS)

Software Exclusive Addons Elementor Type Plugin Vulnerable versions = 2.6.9.3 Fixed in 2.6.9.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2750 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4df0b84e184c Credits wesley...