Stored Cross-Site Scripting Vulnerability in Elementor Premium Addons

CVE-2024-8681

Summary

The Premium Addons for Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping on user-supplied attributes in the Media Grid widget. This vulnerability allows authenticated users with contributor-level access or higher to inject malicious web scripts into pages, leading to execution whenever users access the compromised pages. It is essential for developers to address these vulnerabilities through rigorous input handling and proper sanitization techniques to protect users from potential exploits.

References