Lucene search
+L

5 matches found

osv_cve
osv_cve
•added 2024/05/02 5:15 p.m.•23 views

CVE-2024-3743

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack Group, Shape Separator, Content Switcher, Info Circle and Timeline widgets in all versions up to, and including, 1.13.3 due to insufficient input sanitization and output escaping. Th...

5.4CVSS6AI score0.00572EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/05/02 4:52 p.m.•19 views

CVE-2024-3743 Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack Group, Shape Separator, Content Switcher, Info Circle and Timeline widgets in all versions up to, and including, 1.13.3 due to insufficient input sanitization and output escaping. Th...

6.4CVSS6.1AI score0.00572EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2024/05/02 4:52 p.m.•46 views

CVE-2024-3743 Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack Group, Shape Separator, Content Switcher, Info Circle and Timeline widgets in all versions up to, and including, 1.13.3 due to insufficient input sanitization and output escaping. Th...

6.4CVSS6AI score0.00572EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/05/02 12:00 a.m.•8 views

PT-2024-27546

Name of the Vulnerable Software and Affected Versions Elementor Addon Elements plugin for WordPress versions up to, and including, 1.13.3 Description The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack Group, Shape Separator, Content...

6.4CVSS0.00572EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/02 12:00 a.m.•7 views

CVE-2024-3743: Improper Neutralization of Input During Web Page Generation

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack Group, Shape Separator, Content Switcher, Info Circle and Timeline widgets in all versions up to, and including, 1.13.3 due to insufficient input sanitization and output escaping. Th...

6.4CVSS6AI score0.00572EPSS
SaveExploits0References1
Rows per page
Query Builder