CVE-2024-53746

Summary

CVE-2024-53746 is a Cross-site Scripting (XSS) vulnerability affecting the FlickDevs Elementor Button Plus plugin. The issue permits the injection of malicious scripts during web page generation. An attacker can exploit this vulnerability to execute stored XSS attacks on unsuspecting users. The flaw exists in versions of Elementor Button Plus from n/a through 1.3.3. It is essential for users to update their plugins to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.