1 matches found
CVE-2024-5554: Improper Neutralization of Input During Web Page Generation
The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘onclickevent’ parameter in all versions up to, and including, 5.6.11 due to insufficient input sanitization and outp...
6.4CVSS5.9AI score0.00334EPSS
SaveExploits0References1
20