CVE-2024-38681: WordPress Magical Addons For Elementor plugin <= 1.1.41 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Noor alam Magical Addons For Elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a through 1.1.41.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38681?
CVE-2024-38681 is classified as a Stored Cross-site Scripting (XSS) vulnerability, which can lead to significant security risks.
How do I fix CVE-2024-38681?
To fix CVE-2024-38681, update the Magical Addons For Elementor plugin to a version newer than 1.1.41.
What type of vulnerability is CVE-2024-38681?
CVE-2024-38681 is an Improper Neutralization of Input During Web Page Generation vulnerability, specifically a Stored XSS.
Which versions of Magical Addons For Elementor are affected by CVE-2024-38681?
CVE-2024-38681 affects Magical Addons For Elementor versions from n/a to 1.1.41.
Can CVE-2024-38681 be exploited on any website using Magical Addons For Elementor?
Yes, any website using Magical Addons For Elementor versions up to 1.1.41 is vulnerable to exploitation of CVE-2024-38681.