CVE-2024-30524 WordPress PDF Viewer for Elementor plugin <= 2.9.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedLettuce Plugins PDF Viewer for Elementor allows Stored XSS.This issue affects PDF Viewer for Elementor: from n/a through 2.9.3...

CVE-2024-30524

CVE-2024-30524 : Stored XSS in RedLettuce PDF Viewer for Elementor caused by improper input neutralization during web page generation. Affected: PDF Viewer for Elementor versions up to 2.9.3 (vendor listing notes “from n/a through 2.9.3”). CVSS v3.1 base score 5.4 (medium); impact limited to conf...

WordPress PDF Viewer for Elementor Plugin <= 2.9.3 is vulnerable to Cross Site Scripting (XSS)

Software PDF Viewer for Elementor Type Plugin Vulnerable versions = 2.9.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30524 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f86b1f9b2a9c Credits Khalid Yusuf Required privilege...