CVE-2024-51587

Summary

CVE-2024-51587 is a Cross-site Scripting (XSS) vulnerability affecting the Definitive Addons for Elementor plugin. The flaw, which permits Stored XSS attacks, exists due to improper neutralization of user inputs during webpage generation. This issue can be exploited to inject malicious scripts into a user's web browser, potentially leading to unauthorized access or data theft when visiting a compromised site. The vulnerability affects Definitive Addons for Elementor versions from n/a through 1.5.16. Users are urged to update to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.