Cross-site Scripting Vulnerability in Elementor Website Builder by Elementor

CVE-2024-54444

What is CVE-2024-54444?

A Cross-site Scripting (XSS) vulnerability exists in the Elementor Website Builder, enabling attackers to inject and execute malicious scripts in the context of users' web browsers. This vulnerability is present across multiple versions of the product, specifically from n/a through 3.25.10, allowing for potential data theft, session hijacking, or other forms of exploitation, particularly through improper handling of user input during web page generation.

References