CVE-2023-50901: WordPress HT Mega Plugin <= 2.3.8 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Mega – Absolute Addons For Elementor allows Reflected XSS.This issue affects HT Mega – Absolute Addons For Elementor: from n/a through 2.3.8.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50901?
The severity of CVE-2023-50901 is classified as critical due to the potential for reflected cross-site scripting attacks.
How do I fix CVE-2023-50901?
To fix CVE-2023-50901, upgrade the HT Mega – Absolute Addons For Elementor plugin to version 2.3.9 or later.
Which versions are affected by CVE-2023-50901?
CVE-2023-50901 affects all versions of HT Mega – Absolute Addons For Elementor from n/a up to and including 2.3.8.
What types of attacks can exploit CVE-2023-50901?
CVE-2023-50901 can be exploited to perform reflected cross-site scripting attacks, potentially allowing unauthorized actions on behalf of users.
Is CVE-2023-50901 specific to certain platforms?
Yes, CVE-2023-50901 specifically affects the HT Mega – Absolute Addons For Elementor plugin used in WordPress installations.