CVE-2024-47396

Summary

CVE-2024-47396 is a newly discovered Cross-Site Scripting (XSS) vulnerability affecting Move Addons for Elementor. The flaw, which permits Stored XSS attacks, resides in the plugin's web page generation process. Attackers can exploit this weakness by injecting malicious scripts into a vulnerable website, potentially stealing user data or taking control of user sessions. Move Addons for Elementor versions from n/a to 1.3.3 are reportedly vulnerable, and users are strongly advised to update their plugins to the latest, secure versions as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.