5 matches found
CVE-2024-49259
CVE-2024-49259 affects the WordPress plugin Primary Addon for Elementor (NicheAddons) with a stored XSS vulnerability due to improper input neutralization during web page generation. Affected versions are 1.5.8 and earlier; remediation is to upgrade to version 1.5.9 or later. Patchstack and CVE r...
CVE-2024-5229
CVE-2024-5229 affects the Primary Addon for Elementor plugin (WordPress) through the Pricing Table widget in versions up to and including 1.5.5. The vulnerability is a Stored Cross-Site Scripting (XSS) due to insufficient input sanitization and output escaping on user-supplied attributes. Exploit...
CVE-2024-54314
CVE-2024-54314 is a stored XSS in the Primary Addon for Elementor (NicheAddons) exploited via improper input neutralization during web page generation. Affected versions: n/a through 1.6.0; requires at least authenticated access (Contributor+). Remediation: patched in version 1.6.0. Details confi...