CoreCVE
Back

MEDIUM

WordPress Gum Elementor Addon plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Published Jul 20, 2024

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TemeGUM Gum Elementor Addon allows Stored XSS.This issue affects Gum Elementor Addon: from n/a through 1.3.5.

Affected products

Remediation

Vendor solution

Update to 1.3.6 or a higher version.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner Patchstack
Published Jul 20, 2024
Updated Apr 28, 2026
Reserved Jun 9, 2024
Link CVE-2024-37565

CISA Vulnrichment

Updated Jul 22, 2024

NVD

Status Deferred
Modified Jun 17, 2026
Link CVE-2024-37565

Red Hat

No data

ENISA EUVD

Assigner Patchstack
Published Jul 20, 2024
Updated Apr 28, 2026
Link EUVD-2024-36764

GitHub

No data