CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-8742 | Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.0.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 6.0.4 | 6.0.4 | 2024-09-12 | — |
The Essential Addons for Elementor is susceptible to Stored Cross-Site Scripting through its Filterable Gallery widget across all versions up to 6.0.3. Insufficient input sanitization and output escaping allow attackers with contributor-level access or higher to inject malicious scripts that can be executed when users view affected pages.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.