Lucene search
+L

2 matches found

NVD
NVD
added 2024/06/27 9:15 a.m.29 views

CVE-2024-4983

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘videocolor’ parameter in all versions up to, and including, 5.6.0 due to insufficient input sanitization and output...

6.4CVSS0.00368EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/06/27 12:0 a.m.14 views

WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 5.6.0 is vulnerable to Cross Site Scripting (XSS)

Software The Plus Addons for Elementor Page Builder Lite Type Plugin Vulnerable versions = 5.6.0 Fixed in 5.6.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4983 Patch priority Low CVSS severity Low 6.5 Developer POSIMYTH Innovations PSID...

6.4CVSS5.8AI score0.00368EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder