6.5
Medium
CVE-2024-37541 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StaxWP Elementor…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StaxWP Elementor Addons, Widgets and Enhancements – Stax stax-addons-for-elementor allows DOM-Based XSS.This issue affects Elementor Addons, Widgets and Enhancements – Stax: from n/a through <= 1.5.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Elementor Addons, Widgets and Enhancements – Stax 1.5 | earliest → 1.5.0 | No fix stated |
Other CVEs of Elementor Addons, Widgets and Enhancements – Stax
The 4 CVEs of Elementor Addons, Widgets and Enhancements – Stax →
CVE-2024-3064
The Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress is vulnerable to Stored Cross-Site…
6.4
Medium
CVE-2023-1807
The Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress is vulnerable to Cross-Site Request Forgery…
4.3
Medium
CVE-2023-2189
The Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress is vulnerable to unauthorized modification of…
4.3
Medium