1 matches found
CVE-2024-4980: Improper Neutralization of Input During Web Page Generation
The WPKoi Templates for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'id', 'mixColor', 'backgroundColor', 'saveInCookies', and 'autoMatchOsTheme' parameters in all versions up to, and including, 2.5.9 due to insufficient input sanitization and output escaping...
6.4CVSS5.9AI score0.00342EPSS
SaveExploits0References1
20