CVE-2024-54253: WordPress Xpro Addons For Elementor plugin <= 1.4.6.5 - Cross Site Scripting (XSS) vulnerability
Published Dec 9, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons.This issue affects Xpro Elementor Addons: from n/a through <= 1.4.6.5.
Affected Software
3 affected components
Wpxpro Xpro Addons For Elementor Wordpress<1.4.6.2
Xpro Elementor Addons<=1.4.6.1
WordPress Xpro Addons For Elementor<=1.4.6.1
Event History
Dec 9, 2024
CVE Published
via MITRE·12:44 PM
Data Sourced
via MITRE·12:44 PM
DescriptionWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Jul 13, 58219
Event
via NVD·10:24 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-54253?
CVE-2024-54253 is classified as a high severity vulnerability due to its potential for Stored XSS attacks.
2
How do I fix CVE-2024-54253?
To fix CVE-2024-54253, update Xpro Elementor Addons to version 1.4.6.2 or later.
3
Which versions are affected by CVE-2024-54253?
CVE-2024-54253 affects all versions of Xpro Elementor Addons up to and including 1.4.6.1.
4
What type of vulnerability is CVE-2024-54253?
CVE-2024-54253 is a Cross-site Scripting (XSS) vulnerability.
5
Can CVE-2024-54253 lead to data breaches?
Yes, CVE-2024-54253 can be exploited to steal sensitive user information, potentially leading to data breaches.