CVE-2024-34570: WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability
Published May 8, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.3.
Affected Software
3 affected components
Wpxpro Xpro Addons For Elementor Wordpress<1.4.3.1
Xpro Elementor Addons<=1.4.3
WordPress Xpro Elementor Addons<=1.4.3
Event History
May 8, 2024
CVE Published
via MITRE·10:37 AM
Data Sourced
via MITRE·10:37 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-34570?
CVE-2024-34570 is classified as a critical vulnerability due to its potential for stored cross-site scripting (XSS) attacks.
2
How do I fix CVE-2024-34570?
To fix CVE-2024-34570, update Xpro Elementor Addons to version 1.4.4 or later.
3
What versions of Xpro Elementor Addons are affected by CVE-2024-34570?
CVE-2024-34570 affects Xpro Elementor Addons versions from n/a up to 1.4.3.
4
What impact does CVE-2024-34570 have on my website?
CVE-2024-34570 can allow attackers to inject malicious scripts into web pages viewed by users, compromising their data and session.
5
Is there a workaround for CVE-2024-34570 before updating?
A temporary workaround for CVE-2024-34570 is to disable the affected Xpro Elementor Addons plugin until an update can be applied.