CVE-2024-32721: WordPress Jeg Elementor Kit plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability
Published Apr 24, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jegtheme Jeg Elementor Kit allows Stored XSS.This issue affects Jeg Elementor Kit: from n/a through 2.6.3.
Affected Software
3 affected components
Jegtheme Jeg Elementor Kit Wordpress<2.6.4
Jegtheme Jeg Elementor Kit<=2.6.3
WordPress Jeg Elementor Kit<=2.6.3
Remediation
Information
Update to 2.6.4 or a higher version.
Event History
Apr 24, 2024
CVE Published
via MITRE·10:09 AM
Data Sourced
via MITRE·10:09 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-32721?
CVE-2024-32721 is classified as a Stored Cross-Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2024-32721?
To mitigate CVE-2024-32721, update the Jeg Elementor Kit to version 2.6.4 or later.
3
What versions of Jeg Elementor Kit are affected by CVE-2024-32721?
CVE-2024-32721 affects Jeg Elementor Kit versions up to and including 2.6.3.
4
What could happen if I don't address CVE-2024-32721?
Failure to address CVE-2024-32721 may allow attackers to execute malicious scripts in the context of other users, compromising site security.
5
Is CVE-2024-32721 specific to certain platforms?
CVE-2024-32721 is specifically associated with the Jeg Elementor Kit plugin used on WordPress.