Unlimited Elements For Elementor Vulnerable to Cross-site Scripting Attacks

CVE-2024-29792

What is CVE-2024-29792?

An improper neutralization of input during web page generation vulnerability has been identified in the Unlimited Elements for Elementor, a plugin used for enhancing WordPress sites. This security issue allows for reflected cross-site scripting (XSS) attacks, posing potential risks to end-users and site integrity. Malicious actors can exploit this vulnerability by crafting specific inputs that could be executed in the browsers of unsuspecting users. The vulnerable versions range from n/a to 1.5.93, making it crucial for users to update to the latest version to mitigate the risks associated with this vulnerability.

References