CVE-2024-44032

Summary

CVE-2024-44032 is a newly disclosed Cross-site Scripting (XSS) vulnerability affecting the NicheAddons Restaurant & Cafe Addon for Elementor. The flaw, which permits Stored XSS attacks, lies in the addon's web page generation process. Exploitation of this vulnerability could allow attackers to inject malicious scripts into affected websites, potentially stealing user data or taking control of user sessions. Websites utilizing NicheAddons Restaurant & Cafe Addon for Elementor versions from n/a to 1.5.5 are at risk. Users are urged to update to the latest, secure version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.