CVE Database /
CVE-2024-29934
CVE · Medium
CVE-2024-29934 — Piotnet Addons For Elementor [piotnet-addons-for-elementor] < 2.4.26
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-29934
|
Piotnet Addons For Elementor [piotnet-addons-for-elementor] < 2.4.26 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.5
|
< 2.4.26
|
2.4.26 |
2024-03-25 |
—
|
CVE-2024-29934
A stored cross-site scripting vulnerability was discovered in Piotnet Addons For Elementor versions before 2.4.26 that would enable attackers to embed harmful JavaScript code into the website, which executes in the browsers of visiting users. The flaw permits injection of various malicious payloads including redirects and advertisements through the plugin's functionality. Version 2.4.26 and later address this security issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings