Medium severity6.4NVD Advisory· Published Jun 18, 2024· Updated Jun 17, 2026
CVE-2024-5533
CVE-2024-5533
Description
The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.25.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
2- www.wordfence.com/threat-intel/vulnerabilities/id/6571a899-f217-434f-bbed-b1faf77a8d8bnvdThird Party Advisory
- www.elegantthemes.com/api/changelog/divi.txtnvdRelease Notes
News mentions
0No linked articles in our index yet.