Lucene search
CVE-2024-1988 Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress plugin vulnerable to stored cross-site scripting via 'tag' attribute in blocks for versions <= 2.2.80
Show more
| Reporter | Title | Published | Views | Family All 5 |
|---|---|---|---|---|
 | Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks < 2.2.81 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6 Jun 202400:00 | – | wpvulndb |
 | CVE-2024-1988 | 7 Jun 202404:15 | – | nvd |
 | CVE-2024-1988 | 7 Jun 202404:15 | – | cve |
 | CVE-2024-1988 Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting | 7 Jun 202403:21 | – | vulnrichment |
 | Wordfence Intelligence Weekly WordPress Vulnerability Report (June 3, 2024 to June 9, 2024) | 13 Jun 202415:35 | – | wordfence |
[
{
"vendor": "pickplugins",
"product": "Gutenberg Blocks, Page Builder – ComboBlocks",
"versions": [
{
"version": "*",
"status": "affected",
"lessThanOrEqual": "2.2.80",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo07 Jun 2024 03:21Current
CVSS36.4
EPSS0.00064