CVE-2024-11829

Summary

CVE-2024-11829 is a stored Cross-Site Scripting (XSS) vulnerability affecting The Plus Addons for Elementor plugin for WordPress. The issue lies in the Table Widget's searchable_label parameter, which does not undergo sufficient sanitization and escaping. Authenticated attackers with Contributor-level access or higher can capitalize on this flaw and inject malicious web scripts. These scripts will execute whenever a user accesses a manipulated page, posing a significant security risk. Versions up to and including 6.1.8 are vulnerable to this exploit.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.