CVE-2024-35713

MEDIUM 5.4CVE-2024-35713 · Published 08/06/2024 · updated 17/06/2026

In short

CVE-2024-35713 is a MEDIUM (CVSS 5.4) vulnerability affecting testimonial carousel for elementor (uapp).
Chance of exploitation in the next 30 days (EPSS): 0.24%, higher than 14.8% of all vulnerabilities.
Fix: update to 10.2.0 or later.

Package	Affected versions	Patched versions
testimonial carousel for elementor uapp	`< 10.2.0`	`10.2.0`

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in UAPP GROUP Testimonial Carousel For Elementor allows Stored XSS.This issue affects Testimonial Carousel For Elementor: from n/a through 10.1.1.

References

patchstack.com/database/vulnerability/testimonials-carousel-elementor/wordpress-testimonial-carousel-for-elementor-plugin-10-1-1-cross-site-scripting-xss-vulnerability · Third Party Advisory

More vulnerabilities in testimonial carousel for elementor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free