Lucene search
+L

4 matches found

NVD
NVD
added 2024/04/16 7:15 a.m.19 views

CVE-2024-32557

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Exclusive Addons Exclusive Addons Elementor allows Stored XSS.This issue affects Exclusive Addons Elementor: from n/a through 2.6.9.2...

6.5CVSS6.4AI score0.00289EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/16 6:39 a.m.23 views

CVE-2024-32557 WordPress Exclusive Addons for Elementor plugin <= 2.6.9.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Exclusive Addons Exclusive Addons Elementor allows Stored XSS.This issue affects Exclusive Addons Elementor: from n/a through 2.6.9.2...

6.5CVSS6.5AI score0.00289EPSS
Exploits0References1
CVE
CVE
added 2024/04/16 6:39 a.m.67 views

CVE-2024-32557

CVE-2024-32557 is the Stored XSS vulnerability in the WordPress plugin Exclusive Addons for Elementor, affecting all versions up to 2.6.9.2. Red Hat context confirms the issue arises from insufficient input sanitization and output escaping in the Post Grid Widget, enabling authenticated attackers...

6.5CVSS5.2AI score0.00289EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/04/16 12:0 a.m.13 views

WordPress Exclusive Addons Elementor Plugin <= 2.6.9.2 is vulnerable to Cross Site Scripting (XSS)

Software Exclusive Addons Elementor Type Plugin Vulnerable versions = 2.6.9.2 Fixed in 2.6.9.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32557 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8ef581fa323e Credits Ngô Thiên An ancorn fro...

6.5CVSS6.5AI score0.00289EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder