Lucene search
+L

3 matches found

NVD
NVD
added 2025/06/07 12:15 p.m.41 views

CVE-2024-9993

The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the eaeleventdetailstext parameter of Event Calendar Widget in all versions up to, and including, 6.1.12 due to...

6.4CVSS0.00174EPSS
SaveExploits0References2
CVE
CVE
added 2025/06/07 11:17 a.m.162 views

CVE-2024-9993

CVE-2024-9993 affects the Essential Addons for Elementor plugin (Event Calendar Widget). A stored XSS exists in the eael_event_details_text attribute, exploitable by authenticated users with Contributor+ rights (attackers can inject scripts that execute when others view injected pages). Affected ...

6.4CVSS5.7AI score0.00174EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/06/07 11:17 a.m.46 views

CVE-2024-9993 Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget

The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the eaeleventdetailstext parameter of Event Calendar Widget in all versions up to, and including, 6.1.12 due to...

6.4CVSS0.00174EPSS
SaveExploits0References2
Rows per page
Query Builder