CVE-2024-43292 WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce allows Stored XSS.This issue affects Envo's Elementor Templates & Widgets for WooCommerce: from n/a through 1.4.16...

WordPress Envo's Elementor Templates & Widgets for WooCommerce Plugin <= 1.4.16 is vulnerable to Cross Site Scripting (XSS)

Software Envo's Elementor Templates & Widgets for WooCommerce Type Plugin Vulnerable versions = 1.4.16 Fixed in 1.4.17 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43292 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 73bb0c440891 Credits...