CVE-2024-43150: WordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerability
Published Aug 12, 2024
·Updated
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.4.2.
Affected Software
3 affected components
Wpxpro Xpro Addons For Elementor Wordpress<1.4.4.3
Xpro Elementor Addons<=1.4.4.2
WordPress Xpro Elementor Addons<=1.4.4.2
Remediation
Information
Update to 1.4.4.3 or a higher version.
Event History
Aug 12, 2024
CVE Published
via MITRE·10:12 PM
Data Sourced
via MITRE·10:12 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-43150?
CVE-2024-43150 has a high severity rating due to its potential for stored cross-site scripting attacks.
2
How do I fix CVE-2024-43150?
To fix CVE-2024-43150, update the Xpro Elementor Addons to version 1.4.4.3 or later.
3
What type of vulnerability is CVE-2024-43150?
CVE-2024-43150 is a Stored Cross-Site Scripting (XSS) vulnerability.
4
Which versions of Xpro Elementor Addons are affected by CVE-2024-43150?
CVE-2024-43150 affects Xpro Elementor Addons versions up to and including 1.4.4.2.
5
What can attackers do using CVE-2024-43150?
Attackers can exploit CVE-2024-43150 to execute malicious scripts in a victim's browser, potentially leading to data theft or session hijacking.