Cross-Site Scripting Vulnerability in Elicus WPMozo Addons Lite for Elementor

CVE-2024-56221

What is CVE-2024-56221?

The Elicus WPMozo Addons Lite for Elementor is susceptible to a Cross-Site Scripting (XSS) vulnerability due to improper neutralization of user input during web page generation. This flaw allows attackers to store malicious scripts that can be executed in the browsers of users visiting affected web pages. Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information, session hijacking, and potential site takeover. The issue impacts versions up to 1.2.0, emphasizing the necessity for immediate remediation to safeguard user data and maintain site integrity.

References