CVE Database /
CVE-2024-2091
CVE · Medium
CVE-2024-2091 — Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder] < 1.13.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-2091
|
Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder] < 1.13.2 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
4.6
|
< 1.13.2
|
1.13.2 |
2024-03-27 |
—
|
CVE-2024-2091
The Addon Elements for Elementor plugin versions prior to 1.13.2 contains a stored cross-site scripting vulnerability in its widgets caused by inadequate sanitization and escaping of user-supplied widget attributes. Attackers with contributor access or higher permissions can exploit this flaw to inject malicious scripts into pages, which then execute for any visitor viewing those affected pages. The vulnerability affects all versions up through 1.13.1 and is resolved in version 1.13.2.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings