CVE-2024-53743
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Dec 1, 2024
CWE ID 79
Summary
CVE-2024-53743 is a Cross-site Scripting (XSS) vulnerability affecting the FlickDevs Countdown Timer plugin for Elementor. The flaw, located in the plugin's web page generation process, allows an attacker to inject malicious scripts into a website. These scripts can be stored, waiting for a victim to access the compromised page, leading to potential data theft or unauthorized actions. This issue impacts versions of Countdown Timer for Elementor from n/a through 1.3.6.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share