Stored Cross-Site Scripting in Premium Addons Pro for Elementor by WordPress

CVE-2024-4203

What is CVE-2024-4203?

The Premium Addons Pro for Elementor plugin for WordPress has a vulnerability that allows authenticated users with contributor-level access and higher to execute arbitrary web scripts. This occurs via the maps widget due to inadequate input sanitization and output escaping on user-supplied attributes. Users accessing pages with injected scripts could unknowingly run malicious code. The issue affects all versions up to and including 4.10.30 of the premium plugin, highlighting the importance of keeping plugins updated to mitigate such risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References