CVE-2024-47364
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Oct 6, 2024
Updated: Jan 22, 2025
CWE ID 79
Summary
CVE-2024-47364 represents a Cross-Site Scripting (XSS) vulnerability in Move Addons for Elementor. Maliciously crafted input can be stored and executed in web pages generated by the addon, posing a threat to users. Affected versions of Move Addons for Elementor span from n/a to 1.3.4. This flaw can lead to unintended code execution, potentially exposing sensitive information or taking control of user sessions. It is important to update the addon to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.