Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-47396 EUVD-2024-42432GHSA-2vj8-5447-hhff

WordPress Move Addons for Elementor plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Published Oct 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through <= 1.3.3.

Affected products

VendorProductAffectedFixed
moveaddons Move Addons for Elementor ≤ 1.3.3 —

References