CVE-2024-0442

CVSS 3.1 Score 6.4 of 10 (medium)

Details

Published Feb 29, 2024

Summary

CVE-2024-0442 is a vulnerability in the Royal Elementor Addons and Templates plugin for WordPress, affecting all versions up to 1.3.87. The vulnerability allows authenticated attackers with contributor access or higher to inject arbitrary web scripts in pages using element URL parameters, leading to stored cross-site scripting attacks. The lack of input sanitization and output escaping makes it possible for the injected scripts to execute whenever a user accesses the compromised page. The risk score for this vulnerability is 25, with a base severity of MEDIUM. To remediate this vulnerability, users should update their Royal Elementor Addons and Templates plugin to a version beyond 1.3.87 to ensure proper input sanitization and escape output are implemented. This vulnerability poses a potential danger to organizations as it can be exploited by attackers to execute malicious scripts and potentially compromise user data or launch further attacks on the affected WordPress site.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-0442 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options