Stored Cross-Site Scripting Vulnerability in Jeg Elementor Kit Plugin for WordPress

CVE-2024-3819

What is CVE-2024-3819?

The Jeg Elementor Kit plugin for WordPress is susceptible to Stored Cross-Site Scripting (XSS) attacks via the JKit - Banner widget. This vulnerability arises from inadequate input sanitization and output escaping concerning user-supplied attributes. Authenticated attackers with contributor-level access or higher can exploit this flaw to inject malicious scripts into web pages, which can be executed when users visit the compromised pages. This situation poses significant risks, allowing attackers to manipulate website content and potentially compromise user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References