PT-2024-36761 · Unknown · Royal Elementor Addons
Rafie Muhammad
·
Published
2024-12-31
·
Updated
2025-03-21
·
CVE-2024-56226
CVSS v3.1
7.1
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Royal Elementor Addons versions 1.7.1001 and earlier
Description
The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting (XSS). This enables attackers to inject malicious scripts into websites, potentially leading to unauthorized actions or data theft. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Technical details about exploitation include the vulnerability of
Royal Elementor Addons to reflected XSS attacks. No specific API endpoints, vulnerable parameters, or function names are mentioned.Recommendations
For Royal Elementor Addons versions 1.7.1001 and earlier, update to a version later than 1.7.1001 to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable web pages or modules until a patch is available. Avoid using user-inputted data in sensitive areas of the website until the issue is resolved. At the moment, there is no additional information about other mitigation measures.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Royal Elementor Addons