Cross-Site Scripting Vulnerability in Elicus WPMozo Addons Lite for Elementor
CVE-2024-56221
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 31 December 2024
What is CVE-2024-56221?
The Elicus WPMozo Addons Lite for Elementor is susceptible to a Cross-Site Scripting (XSS) vulnerability due to improper neutralization of user input during web page generation. This flaw allows attackers to store malicious scripts that can be executed in the browsers of users visiting affected web pages. Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information, session hijacking, and potential site takeover. The issue impacts versions up to 1.2.0, emphasizing the necessity for immediate remediation to safeguard user data and maintain site integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
WPMozo Addons Lite for Elementor <= 1.2.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved