CVE-2024-51680

Summary

CVE-2024-51680 is a newly identified Cross-Site Scripting (XSS) vulnerability affecting the Cresta Addons for Elementor by Rizzo Andrea Cresta. The flaw, classified as an Improper Neutralization of Input During Web Page Generation issue, enables attackers to inject malicious scripts into web pages viewed by other users. This vulnerability, which impacts versions from n/a to 1.0.9 of the add-on, can lead to stolen data, unauthorized access, or other malicious actions. Users are advised to update to the latest version of the add-on and employ Content Security Policy (CSP) measures to mitigate potential risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.