Логотип exploitDog
bind:CVE-2024-3901
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-3901

Количество 2

Количество 2

nvd логотип

CVE-2024-3901

9 месяцев назад

The Genesis Blocks WordPress plugin through 3.1.3 does not properly escape attributes provided to some of its custom blocks, making it possible for users allowed to write posts (like those with the contributor role) to conduct Stored XSS attacks.

CVSS3: 6.8
EPSS: Низкий
github логотип

GHSA-p2gx-629f-525f

9 месяцев назад

The Genesis Blocks WordPress plugin through 3.1.3 does not properly escape attributes provided to some of its custom blocks, making it possible for users allowed to write posts (like those with the contributor role) to conduct Stored XSS attacks.

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-3901

The Genesis Blocks WordPress plugin through 3.1.3 does not properly escape attributes provided to some of its custom blocks, making it possible for users allowed to write posts (like those with the contributor role) to conduct Stored XSS attacks.

CVSS3: 6.8
0%
Низкий
9 месяцев назад
github логотип
GHSA-p2gx-629f-525f

The Genesis Blocks WordPress plugin through 3.1.3 does not properly escape attributes provided to some of its custom blocks, making it possible for users allowed to write posts (like those with the contributor role) to conduct Stored XSS attacks.

CVSS3: 6.1
0%
Низкий
9 месяцев назад

Уязвимостей на страницу