cve/2024/CVE-2024-43292.md
2024-08-24 17:55:21 +00:00

923 B

CVE-2024-43292

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in EnvoThemes Envo's Elementor Templates & Widgets for WooCommerce allows Stored XSS.This issue affects Envo's Elementor Templates & Widgets for WooCommerce: from n/a through 1.4.16.

POC

Reference

No PoCs from references.

Github