CVE-2024-33633: WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Reflected XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33633?
CVE-2024-33633 is classified as a reflected cross-site scripting (XSS) vulnerability with high risk of exploitation.
How do I fix CVE-2024-33633?
To mitigate CVE-2024-33633, upgrade Piotnet Addons For Elementor Pro to version 7.1.18 or later.
Which versions of Piotnet Addons For Elementor Pro are affected by CVE-2024-33633?
CVE-2024-33633 affects all versions of Piotnet Addons For Elementor Pro up to and including 7.1.17.
What impact does CVE-2024-33633 have on users?
CVE-2024-33633 allows attackers to execute arbitrary JavaScript code in the context of the user's browser, potentially leading to data theft or site compromise.
Is CVE-2024-33633 related to WordPress?
Yes, CVE-2024-33633 affects the Piotnet Addons For Elementor Pro plugin used on WordPress sites.