CVE-2024-39662: WordPress Black Widgets For Elementor plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Modernaweb Studio Black Widgets For Elementor allows Stored XSS.This issue affects Black Widgets For Elementor: from n/a through 1.3.5.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39662?
CVE-2024-39662 is classified as a serious vulnerability due to its potential for stored cross-site scripting (XSS) attacks.
How do I fix CVE-2024-39662?
To mitigate CVE-2024-39662, update the Black Widgets For Elementor plugin to a version higher than 1.3.5.
What are the risks associated with CVE-2024-39662?
CVE-2024-39662 can allow attackers to inject malicious scripts into web pages viewed by users, leading to data theft and session hijacking.
Which versions of the software are affected by CVE-2024-39662?
CVE-2024-39662 affects Black Widgets For Elementor versions up to and including 1.3.5.
Who is the vendor affected by CVE-2024-39662?
The vendor affected by CVE-2024-39662 is Modernaweb for the Black Widgets For Elementor plugin.