Vulnerabilities > Idioweb
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-08-01 | CVE-2024-39668 | Cross-site Scripting vulnerability in Idioweb Extensions for Elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in petesheppard84 Extensions for Elementor allows Stored XSS.This issue affects Extensions for Elementor: from n/a through 2.0.31. | 5.4 |
| 2024-06-29 | CVE-2024-5666 | Cross-site Scripting vulnerability in Idioweb Extensions for Elementor The Extensions for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the EE Button widget in all versions up to, and including, 2.0.30 due to insufficient input sanitization and output escaping. | 5.4 |