Medium severity5.4NVD Advisory· Published Sep 10, 2024· Updated Jun 17, 2026
CVE-2024-6282
CVE-2024-6282
Description
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-jltma-wrapper-link element in all versions up to, and including 2.0.6.4 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user clicks on the injected link.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4<=2.0.6.4+ 1 more
- (no CPE)range: <=2.0.6.4
- (no CPE)
- litonice13/Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kitsv5Range: 0
- cpe:2.3:a:master-addons:master_addons:*:*:*:*:*:wordpress:*:*Range: <2.0.6.5
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.