Flipbox Plugin Vulnerable to Stored Cross-Site Scripting

CVE-2024-2349

Summary

The Fancy Elementor Flipbox plugin for WordPress contains a vulnerability that enables stored Cross-Site Scripting (XSS) attacks through the Flipbox widget. This issue arises from inadequate input sanitization and output escaping, allowing authenticated users with contributor-level permissions and higher to inject malicious scripts into web pages. Once injected, these scripts execute whenever a user accesses the compromised page, posing significant risks to user security and site integrity.

References