CVE-2024-56062

MEDIUM6.5/ 10.0
Share:
Published: December 31, 2024 at 11:15 PM
Modified: April 23, 2026 at 03:22 PM
Source: audit@patchstack.com

Vulnerability Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through <= 1.3.987.

CVSS Metrics

Base Score
6.5
Severity
MEDIUM
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Weaknesses (CWE)

CWE-79
Source: audit@patchstack.com

References & Intelligence

https://patchstack.com/database/Wordpress/Plugin/royal-elementor-addons/vulnerability/wordpress-royal-elementor-addons-and-templates-plugin-1-3-987-cross-site-scripting-xss-vulnerability?_s_id=cve
Source: audit@patchstack.com
Third Party Advisory

Related Resources

Browse CVE Database
Search 294,000+ vulnerabilities
CVEs from 2024
View all vulnerabilities this year
CWE Database
Explore weakness categories
Security Writeups
Learn from real-world examples
About 4nuxd
Cybersecurity research & tools
Homepage
Explore more security resources