Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-49262 EUVD-2024-43329GHSA-8p7v-x578-3qgx

WordPress Country Flags for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Published Oct 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wepic Country Flags for Elementor allows Stored XSS.This issue affects Country Flags for Elementor: from n/a through 1.0.1.

Affected products

VendorProductAffectedFixed
wepic Country Flags for Elementor ≤ 1.0.1 —

References