CVE-2024-3162

MEDIUM Year: 2024
CVSS v3 Score
5.4
Medium
Weakness Type
CWE-87
View all →

Vulnerability Description

The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Widget Attributes in all versions up to, and including, 2.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVE-2024-32721 is likely a duplicate of this issue.

Related Vulnerabilities

CVE-2021-40131

MEDIUM
CVSS:5.4(Medium)

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack ag...

CWE-872021

CVE-2022-20963

MEDIUM
CVSS:5.4(Medium)

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a use...

CWE-872022

CVE-2024-25640

MEDIUM
CVSS:5.4(Medium)

Iris is a web collaborative platform that helps incident responders share technical details during investigations. A stored Cross-Site Scripting (XSS) vulnerability has been identified in iris-web, af...

CWE-872024

CVE-2024-8505

MEDIUM
CVSS:5.4(Medium)

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_label’ parameter in all versions up to, and including, 7.1.2 due to ins...

CWE-872024

CVE-2020-5298

MEDIUM
CVSS:4.8(Medium)

In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, a user with the ability to use the import functionality of the `ImportExportController` behavior can be socia...

CWE-872020

CVE-2023-20188

MEDIUM
CVSS:4.8(Medium)

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable...

CWE-872023