Medium 5.9
2025-12-28< 1.2.17
Astra Widgets <= 1.2.16 - Authenticated (Editor+) Stored Cross-Site Scripting
Minimum safe version
1.2.17
Update to 1.2.17 or later to address 3 fixable vulnerabilities
Astra Widgets <= 1.2.16 - Authenticated (Editor+) Stored Cross-Site Scripting
CVE-2024-56274
CVE-2024-50439