CVE-2024-9673

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-9673
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-22333. Reason: This candidate is a reservation duplicate of CVE-2025-22333. Notes: All CVE users should reference CVE-2025-22333 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVSS

No CVSS.

References

No reference.

Configurations

No configuration.

History

17 Jan 2025, 17:15

Type Values Removed Values Added
References
  • {'url': 'https://plugins.trac.wordpress.org/browser/piotnet-addons-for-elementor/trunk/assets/js/extension-pafe-tooltip.js', 'source': 'security@wordfence.com'}
  • {'url': 'https://plugins.trac.wordpress.org/changeset/3217875/', 'source': 'security@wordfence.com'}
  • {'url': 'https://wordpress.org/plugins/piotnet-addons-for-elementor/#developers', 'source': 'security@wordfence.com'}
  • {'url': 'https://www.wordfence.com/threat-intel/vulnerabilities/id/317a0e93-fcd7-41a0-a83e-98c50bfc6be2?source=cve', 'source': 'security@wordfence.com'}
Summary (en) The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Heading widget in all versions up to, and including, 2.4.31 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. (en) Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-22333. Reason: This candidate is a reservation duplicate of CVE-2025-22333. Notes: All CVE users should reference CVE-2025-22333 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CWE CWE-79
CVSS v2 : unknown
v3 : 6.4 		v2 : unknown
v3 : unknown

08 Jan 2025, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-08 07:15

Updated : 2025-01-17 17:15

NVD link : CVE-2024-9673

Mitre link : CVE-2024-9673

CVE.ORG link : CVE-2024-9673

JSON object : View

Products Affected

No product.

CWE

No CWE.