6.4
Moyenne
CVE-2024-3308 The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
Description
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget's attributes in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HT Mega – Absolute Addons For Elementor 2.4 | premières → 2.4.9 | Pas de correctif indiqué |
| HT Mega Addons for Elementor – Elementor Widgets & Template Builder 2.4 | premières → 2.4.9 | Pas de correctif indiqué |
Références
- www.wordfence.com www.wordfence.com
- plugins.trac.wordpress.org plugins.trac.wordpress.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de HT Mega – Absolute Addons For Elementor
Les 24 CVE de HT Mega – Absolute Addons For Elementor →
CVE-2025-13141
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
6.4
Moyenne
CVE-2025-8068
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification and loss…
4.3
Moyenne
CVE-2025-8401
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in…
4.3
Moyenne
CVE-2025-8151
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Path Traversal in all versions up…
4.3
Moyenne