Stored Cross-Site Scripting in Master Addons for Elementor Plugin by WordPress

CVE-2024-4265

What is CVE-2024-4265?

The Master Addons plugin for Elementor is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping on the ‘url’ parameter. Authenticated attackers with contributor-level permissions can exploit this vulnerability to inject malicious scripts into web pages. These scripts will execute in the context of other users accessing affected pages, potentially leading to unauthorized actions, data theft, or other security complications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References