medium6.5
CVE-2024-32457
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The CSSIgniter Team Elements Plus!
Impact
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The CSSIgniter Team Elements Plus! allows Stored XSS.This issue affects Elements Plus!: from n/a through 2.16.3.
Affected products
| Product | Affected versions |
|---|---|
| Elements Plus!: From N/A | through 2.16.3. |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- https://patchstack.com/database/vulnerability/elements-plus/wordpress-elements-plus-plugin-2-16-3-cross-site-scripting-xss-vulnerability?_s_id=cve
- https://patchstack.com/database/vulnerability/elements-plus/wordpress-elements-plus-plugin-2-16-3-cross-site-scripting-xss-vulnerability?_s_id=cve