6.5
Medium
CVE-2024-29106 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Addons for Elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.10.16.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Premium Addons for Elementor 4.10 | earliest → 4.10.16 | No fix stated |
Other CVEs of Premium Addons for Elementor
The 34 CVEs of Premium Addons for Elementor →
CVE-2026-62078
Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions
6.5
Medium
CVE-2026-94168
Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions
6.5
Medium
CVE-2025-69300
Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows…
5.4
Medium
CVE-2025-68494
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for…
5.3
Medium