LA-Studio Element Kit for Elementor, CVE-2024-37479

CVE, Research URL: CVE-2024-37479
Home page URL: Security reports for LA-Studio Element Kit for Elementor
Application: LA-Studio Element Kit for Elementor
Published on: Jul 02, 2024
Research Description: Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.8.1.
Affected versions: Min -, max 1.3.9.
Status: vulnerable