CVE-2024-54224

Summary

CVE-2024-54224 is a Cross-site Scripting (XSS) vulnerability affecting QuomodoSoft's ElementsReady Addons for Elementor from versions n/a through 6.4.7. Malicious scripts can be injected into web pages generated by the add-ons, potentially allowing attackers to steal user data or take control of user sessions. The vulnerability arises from the application's failure to properly neutralize user input, enabling attackers to manipulate the DOM and execute malicious code on unsuspecting users' browsers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.