Lucene search

CVE-2024-3588

🗓️ 02 May 2024 17:27:15Reported by [email protected]Type

Getwid plugin XSS vulnerability in Countdown block

Reporter	Title	Published	Views	Family All 6
WPVulnDB	Getwid – Gutenberg Blocks < 2.0.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'	26 Apr 202400:00	–	wpvulndb
CVE	CVE-2024-3588	2 May 202417:15	–	cve
Patchstack	WordPress Getwid – Gutenberg Blocks Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)	29 Apr 202400:00	–	patchstack
Cvelist	CVE-2024-3588	2 May 202416:52	–	cvelist
Vulnrichment	CVE-2024-3588	2 May 202416:52	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 22, 2024 to April 28, 2024)	2 May 202414:49	–	wordfence

Source	Link
github	www.github.com/motopress/getwid/pull/123/files
plugins	www.plugins.trac.wordpress.org/browser/getwid/trunk/assets/blocks/counter/frontend.js
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/c4770184-1b96-490c-b506-f648ab3ed764

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 May 2024 17:15Current

5.7Medium risk

Vulners AI Score5.7

CVSS36.4

EPSS0.001