Stored Cross-Site Scripting Vulnerability in Elementor Site Library Plugin

CVE-2024-8921

Summary

The Zita Elementor Site Library plugin for WordPress is susceptible to a Stored Cross-Site Scripting vulnerability, enabling authenticated users with Author-level and higher access to upload SVG files that aren't properly sanitized. This oversight allows attackers to inject arbitrary web scripts into web pages, which will execute for any user viewing the SVG file. Immediate action is recommended for all users employing the Zita Elementor Site Library to mitigate potential security risks associated with this vulnerability.

References