CVE-2024-51683

Summary

CVE-2024-51683 is a newly disclosed Cross-site Scripting (XSS) vulnerability affecting Michael Gangolf Custom post type templates for Elementor. The flaw, which permits Stored XSS attacks, is located within the web page generation process. Maliciously crafted input can be injected into the templates, potentially leading to the execution of malicious scripts in a user's browser when they view a vulnerable page. This issue poses a serious risk to users of Elementor with custom post type templates from version n/a through 1.10.1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.