CVE-2024-52354

MEDIO 5.4CVE-2024-52354 · Published 11/11/2024 · updated 17/06/2026

In breve

CVE-2024-52354 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda web stories widgets for elementor (coolplugins).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.28%, superiore al 20.6% delle vulnerabilità.
Correzione: aggiornare a 1.1.1 o successiva.

Package	Affected versions	Patched versions
web stories widgets for elementor coolplugins	`< 1.1.1`	`1.1.1`

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cool Plugins Web Stories Widgets For Elementor shortcodes-for-amp-web-stories-and-elementor-widget allows Stored XSS.This issue affects Web Stories Widgets For Elementor: from n/a through <= 1.1.

References

patchstack.com/database/Wordpress/Plugin/shortcodes-for-amp-web-stories-and-elementor-widget/vulnerability/wordpress-web-stories-widgets-for-elementor-plugin-1-1-cross-site-scripting-xss-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free