Biplob018 Image Hover Effects for Elementor Unauthenticated Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in the Biplob018 Image Hover Effects for Elementor with Lightbox and Flipbox plugin, affecting versions through 2.8. This vulnerability allows unauthenticated users to inject malicious scripts that could be executed when visitors view the affected content.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users are advised to update the plugin to version 3.0 or later. Patchstack users can enable auto-updates for vulnerable plugins.