Reflected Cross-Site Scripting in Exclusive Addons for Elementor Plugin by WordPress

CVE-2024-3489

What is CVE-2024-3489?

The Exclusive Addons for Elementor plugin for WordPress is susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping methods in the Countdown Expired Title feature. This vulnerability allows unauthenticated attackers to inject malicious web scripts into pages, which can be executed if a user unwittingly clicks on a crafted link, potentially compromising user security and data integrity.

References