CVE-2024-52471: Idioweb Extensions For Elementor

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in petesheppard84 Extensions for Elementor allows Reflected XSS.This issue affects Extensions for Elementor: from n/a through 2.0.37.

Affected products

• Idioweb Extensions For Elementor: up to and including 2.0.40

Published 2024-11-20. Last modified 2026-06-17.