CVE-2024-8241

🗓️ 10 Sep 2024 10:15:13Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 10 Views

The Nova Blocks by Pixelgrade plugin for WordPress is vulnerable to Stored Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-8241	10 Sep 202413:23	–	circl
CNNVD	WordPress plugin Nova Blocks by Pixelgrade 跨站脚本漏洞	10 Sep 202400:00	–	cnnvd
CVE	CVE-2024-8241	10 Sep 202409:30	–	cve
Cvelist	CVE-2024-8241 Nova Blocks by Pixelgrade <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute	10 Sep 202409:30	–	cvelist
EUVD	EUVD-2024-49042	3 Oct 202520:07	–	euvd
Patchstack	WordPress Nova Blocks by Pixelgrade Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)	10 Sep 202400:00	–	patchstack
Patchstack	WordPress Nova Blocks by Pixelgrade plugin <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute vulnerability	10 Sep 202401:20	–	patchstack
RedhatCVE	CVE-2024-8241	23 May 202507:19	–	redhatcve
Vulnrichment	CVE-2024-8241 Nova Blocks by Pixelgrade <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute	10 Sep 202409:30	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (September 9, 2024 to September 15, 2024)	19 Sep 202415:42	–	wordfence

NVD

Node

pixelgrade nova_blocksRange<2.1.8wordpress

Source	Link
github	www.github.com/pixelgrade/nova-blocks/commit/655b5b804306c3ca3a59707cc2f12098e193b4ca
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/3011befd-c0c6-4800-a370-e592c3ec483f
wordpress	www.wordpress.org/plugins/nova-blocks/
plugins	www.plugins.trac.wordpress.org/changeset/3148752/

26 Sep 2024 22:03Current

CVSS 3.15.4 - 6.4

EPSS0.00343

wordpress cross-site scripting pixelgrade