CVE Database /
CVE-2024-6804
CVE · Medium
CVE-2024-6804 — Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress [jeg-elementor-kit] < 2.6.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-6804
|
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress [jeg-elementor-kit] < 2.6.8 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 2.6.8
|
2.6.8 |
2024-08-26 |
—
|
CVE-2024-6804
The Jeg Elementor Kit plugin for WordPress contains a security flaw that allows malicious users with at least Author privileges to upload SVG files containing malicious code, which can then be executed by other users when they access those files. This vulnerability is present in all versions of the plugin up to and including 2.6.7. As a result, authenticated attackers can inject arbitrary web scripts into pages that will run automatically whenever someone views the affected SVG file.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings