CVE-2024-47303
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2024-47303 is a newly disclosed Cross-site Scripting (XSS) vulnerability affecting Livemesh Addons for Elementor. An attacker can exploit this Stored XSS issue, which occurs during web page generation, to inject malicious scripts into a targeted user's web page. This vulnerability, impacting Livemesh Addons for Elementor versions 8.5 and below, could lead to unauthorized user actions, data theft, and other potential security risks. Users are advised to apply the available patches or upgrade to a secure version as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.