CVE-2024-51674
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Nov 9, 2024
Updated: Nov 12, 2024
CWE ID 79
Summary
CVE-2024-51674 is a Cross-site Scripting (XSS) vulnerability affecting the TemplatesCoder Sastra Essential Addons for Elementor. This issue permits DOM-Based XSS attacks, enabling malicious scripts to be injected into web pages generated by the addon. The vulnerability can be exploited by attackers to steal user data or take control of user sessions. The affected version range is from n/a to 1.0.5. It is recommended that users update to the latest version of the addon to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.