CVE-2024-10091 ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget

🗓️ 26 Oct 2024 02:30:31Reported by WordfenceType

ElementsKit Elementor addons plugin for WordPress <= 3.2.9 Authenticated Stored XS

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2024-10091	26 Oct 202403:15	–	nvd
CVE	CVE-2024-10091	26 Oct 202403:15	–	cve
Patchstack	WordPress Elements kit Elementor addons Plugin <= 3.2.9 is vulnerable to Cross Site Scripting (XSS)	25 Oct 202400:00	–	patchstack
Cvelist	CVE-2024-10091 ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget	26 Oct 202402:31	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 21, 2024 to October 27, 2024)	31 Oct 202415:37	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/00b278af-6ce6-4e70-a83a-a1b035542cd4
plugins	www.plugins.trac.wordpress.org/browser/elementskit-lite/tags/3.2.9/widgets/image-comparison/image-comparison.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo