CVE-2023-50901

Summary

CVE-2023-50901 is a Cross-site Scripting (XSS) vulnerability affecting HasThemes HT Mega – Absolute Addons For Elementor. This issue allows an attacker to inject malicious scripts into a webpage generated by the add-on, exploiting improper input neutralization. Affected versions of HT Mega – Absolute Addons For Elementor range from n/a to 2.3.8. Successful exploitation could lead to unauthorized access, data theft, or even complete takeover of the victim's account. Users are urged to update their add-ons to the latest version to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.