3 matches found
CVE-2024-27986
RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
CVE-2024-27986 WordPress Livemesh Addons for Elementor Plugin <= 8.3.5 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Livemesh Elementor Addons by Livemesh allows Stored XSS.This issue affects Elementor Addons by Livemesh: from n/a through 8.3.5...
CVE-2024-27986
The CVE concerns the WordPress plugin Elementor Addons for Livemesh. It describes a Stored Cross-Site Scripting (XSS) vulnerability in the Livemesh Post Multislider widget, triggered by the slider_style attribute, due to insufficient input sanitization and output escaping. The issue affects Eleme...