Essential Addons for Elementor <=6.0.3 Authenticated Stored XSS (CVE-2024-8742)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget 2. Vulnerability Severity: Medium (6.4) 3. Vulnerability Description: - Describes a stored cross-site scripting (XSS) vulnerability in the Filterable Gallery widget of the Essential Addons for Elementor plugin. - The vulnerability allows users with Contributor or higher privileges to inject malicious scripts and execute arbitrary code. 4. Affected Versions: - <= 6.0.3 - Fixed version: 6.0.4 5. Remediation Recommendation: - Update to version 6.0.4 or higher. 6. Public Release Date: September 12, 2024 7. Update Date: September 13, 2024 8. Researcher: zer0gh0st 9. CVE ID: CVE-2024-8742 10. CVSS Score: 3.1 11. License Information: - Defiant Inc. grants users a perpetual, worldwide, non-exclusive, royalty-free, irrevocable copyright license to copy, prepare derivative works, publicly display, publicly perform, distribute, and reproduce this software vulnerability information. - MITRE Corporation grants users a perpetual, worldwide, non-exclusive, royalty-free, irrevocable copyright license to copy, prepare derivative works, publicly display, publicly perform, distribute, and reproduce Common Vulnerabilities and Exposures (CVE). 12. Contact Information: - If you have information to add or discover errors, please contact wfi-support@wordfence.com. This information helps users understand the severity, scope of impact, and how to remediate and avoid the vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

Essential Addons for Elementor <=6.0.3 Authenticated Stored XSS (CVE-2024-8742)

More from this source