Cross-Site Scripting Vulnerability in WPKoi Templates for Elementor by WPKoi
CVE-2024-56241

6.5MEDIUM

Key Information:

Vendor
WordPress
Status
WPkoi Templates For Elementor
Vendor
CVE Published:
2 January 2025

Summary

A Cross-Site Scripting (XSS) vulnerability exists in the WPKoi Templates for Elementor. This flaw arises from improper handling of input during web page generation, allowing attackers to inject malicious scripts that can be stored and executed in the context of users' web sessions. The vulnerability affects versions from n/a through 3.1.3, making it crucial for users to assess their installations and apply the necessary patches to mitigate potential risks to their web applications.

Affected Version(s)

WPKoi Templates for Elementor <= 3.1.3

References

https://patchstack.com/database/wordpress/plugin/wpkoi-te...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

João Pedro S Alcântara (Kinorth) (Patchstack Alliance)
.