CVE-2024-30426: WordPress Hash Elements plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HashThemes Hash Elements allows Stored XSS.This issue affects Hash Elements: from n/a through 1.3.3.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30426?
CVE-2024-30426 has been classified as a high severity vulnerability due to its potential for allowing stored cross-site scripting (XSS).
How do I fix CVE-2024-30426?
To fix CVE-2024-30426, upgrade the Hash Elements plugin to version 1.3.4 or higher immediately.
What is the nature of CVE-2024-30426?
CVE-2024-30426 is an improper neutralization of input during web page generation vulnerability that allows stored XSS in HashThemes Hash Elements.
Which versions of Hash Elements are affected by CVE-2024-30426?
CVE-2024-30426 affects Hash Elements versions up to and including 1.3.3.
Can CVE-2024-30426 impact WordPress sites?
Yes, CVE-2024-30426 can impact WordPress sites using the affected versions of the Hash Elements plugin.