CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-39667 | Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons [bdthemes-element-pack-lite] < 5.6.12 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 5.6.12 | 5.6.12 | 2024-08-01 | — |
The Element Pack Addons for Elementor plugin through version 5.6.11 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts. The flaw was addressed in version 5.6.12, where the vulnerability was patched to prevent XSS attacks through the plugin's functionality.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.