CVE-2024-54253

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons.This issue affects Xpro Elementor Addons: from n/a through <= 1.4.6.5.

Score

CVSS 3.1 6.5 Medium

Status

Modified - audit@patchstack.com

Published

2024-12-09

Last modified

2026-04-28

Weaknesses

CWE-79

Affected products

• Xpro Addons For Elementor (Wpxpro)
• Xpro Elementor Addons (Xpro)

References

• https://patchstack.com/database/Wordpress/Plugin/xpro-elementor-addons/vulnerability/wordpress-xpro-addons-for-elemento…