CVE-2024-43225

CVE-2024-43225 affects Enter Addons (WordPress plugin for Elementor). Evidence in connected data shows a Stored Cross-Site Scripting vulnerability that is exploitable by authenticated users (Contributor+). Root cause reported in multiple sources points to improper handling/neutralization of input...

WordPress Enter Addons Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)

Software Enter Addons Type Plugin Vulnerable versions = 2.1.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43225 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f8faf3c8e7a9 Credits Michael Required privilege Contributor...