4 matches found
CVE-2024-32557
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Exclusive Addons Exclusive Addons Elementor allows Stored XSS.This issue affects Exclusive Addons Elementor: from n/a through 2.6.9.2...
CVE-2024-32557 WordPress Exclusive Addons for Elementor plugin <= 2.6.9.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Exclusive Addons Exclusive Addons Elementor allows Stored XSS.This issue affects Exclusive Addons Elementor: from n/a through 2.6.9.2...
CVE-2024-32557
CVE-2024-32557 is the Stored XSS vulnerability in the WordPress plugin Exclusive Addons for Elementor, affecting all versions up to 2.6.9.2. Red Hat context confirms the issue arises from insufficient input sanitization and output escaping in the Post Grid Widget, enabling authenticated attackers...
WordPress Exclusive Addons Elementor Plugin <= 2.6.9.2 is vulnerable to Cross Site Scripting (XSS)
Software Exclusive Addons Elementor Type Plugin Vulnerable versions = 2.6.9.2 Fixed in 2.6.9.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32557 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8ef581fa323e Credits Ngô Thiên An ancorn fro...