CVE-2024-37479

published 2024-07-02

CVE-2024-37479: Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the…

Priority P3 49 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.8.1.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
la-studio	la-studio_element_kit_for_elementor	n/a – 1.3.8.1	—
la-studioweb	element_kit_for_elementor	< 1.3.9	1.3.9

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-98