CVE-2024-51581

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Nov 10, 2024
Updated: Nov 13, 2024
CWE ID 79

Summary

CVE-2024-51581 is a newly disclosed Cross-Site Scripting (XSS) vulnerability affecting the NicheAddons Restaurant & Cafe Addon for Elementor. This issue permits attackers to inject malicious scripts into web pages generated by the addon, potentially leading to stolen user data or unauthorized account access. The vulnerability exists in versions of the Restaurant & Cafe Addon for Elementor ranging from the unspecified older versions through 1.5.6. Users are strongly advised to upgrade to a patched version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share