CVE-2024-50521

Name of the Vulnerable Software and Affected Versions: Alley Elementor Widget versions 1.0.0 through 1.0.7

Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means an attacker could potentially inject malicious scripts into the website, affecting users' sessions.

Recommendations: For Alley Elementor Widget versions 1.0.0 through 1.0.7, update to a version later than 1.0.7 to resolve the issue. At the moment, there is no information about other mitigation measures.