CVE-2024-47303

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Sep 25, 2024
Updated: Oct 2, 2024
CWE ID 79

Summary

CVE-2024-47303 is a newly disclosed Cross-site Scripting (XSS) vulnerability affecting Livemesh Addons for Elementor. An attacker can exploit this Stored XSS issue, which occurs during web page generation, to inject malicious scripts into a targeted user's web page. This vulnerability, impacting Livemesh Addons for Elementor versions 8.5 and below, could lead to unauthorized user actions, data theft, and other potential security risks. Users are advised to apply the available patches or upgrade to a secure version as soon as possible to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share