CVE Database /
CVE-2024-9058
CVE · Medium
CVE-2024-9058 — Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons [bdthemes-element-pack-lite] < 5.10.6
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-9058
|
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons [bdthemes-element-pack-lite] < 5.10.6 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 5.10.6
|
5.10.6 |
2024-12-02 |
—
|
CVE-2024-9058
The Element Pack Elementor Addons plugin contains a security flaw affecting all versions up to 5.10.5, which allows malicious users with elevated permissions to insert unauthorized code into website content. This occurs because the Lightbox widget fails to properly filter and display user input, enabling attackers to inject scripts that will run when visited by other users. As a result, authenticated users can exploit this vulnerability to execute arbitrary web scripts on affected pages.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings