CVE-2024-34547: WordPress Magical Addons For Elementor plugin <= 1.1.34 - Cross Site Scripting (XSS) vulnerability
Published May 8, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor alam Magical Addons For Elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a through 1.1.34.
Affected Software
3 affected components
Wpthemespace Magical Addons For Elementor Wordpress<1.1.35
Noor alam Magical Addons For Elementor<=1.1.34
Magical Addons For Elementor<=1.1.34
Remediation
Information
Update to 1.1.35 or a higher version.
Event History
May 8, 2024
CVE Published
via MITRE·11:31 AM
Data Sourced
via MITRE·11:31 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-34547?
CVE-2024-34547 is a high severity vulnerability that allows for stored cross-site scripting (XSS) attacks.
2
How do I fix CVE-2024-34547?
To fix CVE-2024-34547, update Magical Addons For Elementor to version 1.1.35 or later.
3
What is affected by CVE-2024-34547?
CVE-2024-34547 affects all versions of Magical Addons For Elementor from its inception up to 1.1.34.
4
What kind of attacks does CVE-2024-34547 enable?
CVE-2024-34547 enables attackers to perform stored cross-site scripting (XSS) attacks which can compromise user data.
5
Who is the vendor of the vulnerable software related to CVE-2024-34547?
The vendor of the vulnerable software related to CVE-2024-34547 is Noor alam.