CVE Database /
CVE-2024-2250
CVE · Medium
CVE-2024-2250 — Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-2250
|
Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.3 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.4
|
< 1.4.3
|
1.4.3 |
2024-03-28 |
—
|
CVE-2024-2250
The Xpro Addons plugin for Elementor before version 1.4.3 contains a cross-site scripting flaw that could enable an attacker to inject harmful scripts into a website, potentially leading to redirects, unwanted advertisements, or other malicious HTML being executed in visitors' browsers. Francesco Carlucci identified and reported this vulnerability, which was subsequently patched in version 1.4.3. Users should update their installations to the patched version to eliminate this risk.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings