6.5
Moyenne
CVE-2025-24578 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows DOM-Based XSS.This issue affects ElementInvader Addons for Elementor: from n/a through <= 1.3.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ElementInvader Addons for Elementor 1.3 | premières → 1.3.0 | Pas de correctif indiqué |
| ElementInvader Addons for Elementor 1.3 | premières → 1.3.0 | Pas de correctif indiqué |
Autres CVE de ElementInvader Addons for Elementor
Les 10 CVE de ElementInvader Addons for Elementor →
CVE-2025-24729
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader…
6.5
Moyenne
CVE-2025-24618
Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor…
4.3
Moyenne
CVE-2025-22786
Path Traversal: '.../...//' vulnerability in Element Invader ElementInvader Addons for Elementor…
7.5
Élevée
CVE-2024-12059
The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all…
4.3
Moyenne