CVE-2024-33631: WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Authenticated Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Stored XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33631?
The severity of CVE-2024-33631 is classified as high due to its potential for Stored XSS attacks.
How do I fix CVE-2024-33631?
To fix CVE-2024-33631, update Piotnet Addons For Elementor Pro to the latest version beyond 7.1.17.
What type of vulnerability is CVE-2024-33631?
CVE-2024-33631 is a Cross-site Scripting (XSS) vulnerability that arises from improper input neutralization.
Which versions of Piotnet Addons For Elementor Pro are affected by CVE-2024-33631?
Piotnet Addons For Elementor Pro versions from n/a up to and including 7.1.17 are affected by CVE-2024-33631.
Can CVE-2024-33631 be exploited remotely?
Yes, CVE-2024-33631 can be exploited remotely, allowing attackers to execute malicious scripts in the context of the user's session.