Magical Posts Display – Elementor Advanced Posts widgets, CVE-2024-37951

CVE, Research URL: CVE-2024-37951
Home page URL: Security reports for Magical Posts Display – Elementor Advanced Posts widgets
Application: Magical Posts Display – Elementor Advanced Posts widgets
Published on: Jul 20, 2024
Research Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Noor alam Magical Posts Display – Elementor & Gutenberg Posts Blocks allows Stored XSS.This issue affects Magical Posts Display – Elementor & Gutenberg Posts Blocks: from n/a through 1.2.38.
Affected versions: Min -, max 1.2.38.
Status: vulnerable