CVE-2024-44026
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Oct 6, 2024
Updated: Oct 7, 2024
CWE ID 79
Summary
CVE-2024-44026 is an XSS (Cross-site Scripting) vulnerability affecting the Charity Addon for Elementor, version n/a through 1.3.0. An attacker can exploit this Stored XSS flaw during web page generation, injecting malicious scripts into a targeted website. The impact includes potential data theft or unauthorized user actions, posing a significant security risk for affected websites. Users are urged to update the addon to the latest version to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.