Lucene search

CVE-2024-5221

🗓️ 06 Jun 2024 09:14:15Reported by WordfenceType

Qi Blocks WordPress plugin vulnerable to Stored XSS, allows authenticated attackers to inject arbitrary web script

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2024-5221 Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting	6 Jun 202408:33	–	cvelist
Patchstack	WordPress Qi Blocks Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)	6 Jun 202400:00	–	patchstack
WPVulnDB	Qi Blocks < 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting	5 Jun 202400:00	–	wpvulndb
NVD	CVE-2024-5221	6 Jun 202409:15	–	nvd
Vulnrichment	CVE-2024-5221 Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting	6 Jun 202408:33	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 3, 2024 to June 9, 2024)	13 Jun 202415:35	–	wordfence

Nvd

Vulners

Node

qodeinteractive qi_blocksRange<1.3.0wordpress

[
  {
    "vendor": "qodeinteractive",
    "product": "Qi Blocks",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.2.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/bdf00861-e31e-485c-a562-12dba56af1c7

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Jun 2024 09:15Current

5.5Medium risk

Vulners AI Score5.5

CVSS35.4 - 6.4

EPSS0.00042

SSVC

CWE-79