Stored Cross-Site Scripting Vulnerability in Plus Addons for Elementor

CVE-2024-3199

What is CVE-2024-3199?

The Plus Addons for Elementor plugin for WordPress is exposed to a stored cross-site scripting vulnerability through its countdown widget. This vulnerability exists due to insufficient input sanitization and output escaping, allowing authenticated users with contributor access or higher to inject arbitrary web scripts. These malicious scripts can execute whenever a user accesses the affected page, posing significant security risks and impacting user data integrity across websites utilizing the vulnerable versions of the plugin.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References