CVE-2024-54212: WordPress Magical Addons For Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a through <= 1.3.6.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54212?
CVE-2024-54212 is classified as a Stored Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2024-54212?
To remediate CVE-2024-54212, update the Magical Addons for Elementor plugin to a version later than 1.2.6.
What versions are affected by CVE-2024-54212?
CVE-2024-54212 affects Magical Addons For Elementor versions up to and including 1.2.6.
Can CVE-2024-54212 allow attackers to exploit my site?
Yes, CVE-2024-54212 can enable attackers to execute malicious scripts on users' browsers via stored XSS.
Is CVE-2024-54212 specific to any platform?
CVE-2024-54212 is specifically an issue with the Noor alam Magical Addons For Elementor plugin on WordPress.