CVE-2024-29106: WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Premium Addons for Elementorto a version that resolves this vulnerability.Fixed in 4.10.17
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29106?
CVE-2024-29106 has a severity rating indicating a risk of Stored Cross-site Scripting (XSS) vulnerabilities.
How do I fix CVE-2024-29106?
To fix CVE-2024-29106, update the Leap13 Premium Addons for Elementor to version 4.10.17 or later.
What versions of Premium Addons for Elementor are affected by CVE-2024-29106?
CVE-2024-29106 affects Premium Addons for Elementor versions up to and including 4.10.16.
What type of vulnerability is CVE-2024-29106?
CVE-2024-29106 is an improper neutralization of input vulnerability leading to Cross-site Scripting (XSS).
Is CVE-2024-29106 a critical vulnerability?
CVE-2024-29106 is considered a significant security concern due to its potential for enabling Stored XSS attacks.