Vulnerabilities > CVE-2024-35782 - Unspecified vulnerability in Codeless Cowidgets - Elementor

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

codeless

NVD

Published: 2024-06-04

Updated: 2024-11-21

Summary

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Codeless Cowidgets – Elementor Addons allows Stored XSS.This issue affects Cowidgets – Elementor Addons: from n/a through 1.1.1.

Vulnerable Configurations

Part	Description	Count
Application	Codeless Codeless Cowidgets Elementor - Codeless Cowidgets Elementor 1.0.7 Codeless Cowidgets Elementor 1.0.8 Codeless Cowidgets Elementor 1.0.9 Codeless Cowidgets Elementor 1.0.10 Codeless Cowidgets Elementor 1.0.11 Codeless Cowidgets Elementor 1.1.0 Codeless Cowidgets Elementor 1.1.1	8

References

https://patchstack.com/database/vulnerability/cowidgets-elementor-addons/wordpress-cowidgets-elementor-addons-plugin-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
https://patchstack.com/database/vulnerability/cowidgets-elementor-addons/wordpress-cowidgets-elementor-addons-plugin-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve