Skip to content
Sign in
6.5 Medium

CVE-2024-54315 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Events…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Events Addon for Elementor events-addon-for-elementor allows DOM-Based XSS.This issue affects Events Addon for Elementor: from n/a through <= 2.2.2.

Affected products and versions

Product Affected versions Fixed in
Events Addon for Elementor 2.2 earliest → 2.2.2 No fix stated

Other CVEs of Events Addon for Elementor

The 8 CVEs of Events Addon for Elementor →
CVE-2024-13362 Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in… 6.1 Medium CVE-2025-8150 The Events Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium CVE-2024-12061 The Events Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and… 4.3 Medium CVE-2024-49264 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Events… 6.5 Medium
Track this CVE