CVE-2024-56221

Summary

CVE-2024-56221 is a Cross-site Scripting (XSS) vulnerability affecting the Elicus WPMozo Addons Lite for Elementor plugin. The issue, which allows stored XSS, arises from improper neutralization of user input during web page generation. This security flaw could be exploited by attackers to inject malicious scripts into a targeted website, potentially leading to unauthorized data access or theft, and other malicious activities. Websites running the affected plugin version from n/a through 1.2.0 are at risk, making it essential for users to update to a secure version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.