WordPress Gutenberg Blocks with AI by Kadence WP plugin <= 3.2.45 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes vulnerability

🗓️ 01 Jul 2024 03:52:55Reported by WebbernautType

Authenticated contributors can trigger stored cross site scripting via HTML data attributes in Kadence Blocks plugin up to version 3.2.45.

Reporter	Title	Published	Views	Family All 9
CVE	CVE-2024-5819	29 Jun 202409:46	–	cve
Cvelist	CVE-2024-5819 Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.45 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes	29 Jun 202409:46	–	cvelist
EUVD	EUVD-2024-46967	3 Oct 202520:07	–	euvd
NVD	CVE-2024-5819	29 Jun 202410:15	–	nvd
Patchstack	WordPress Gutenberg Blocks by Kadence Blocks Plugin <= 3.2.45 is vulnerable to Cross Site Scripting (XSS)	1 Jul 202400:00	–	patchstack
Positive Technologies	PT-2024-37181 · Kadence Wp · Gutenberg Blocks With Ai By Kadence Wp	29 Jun 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-5819	23 May 202508:09	–	redhatcve
Vulnrichment	CVE-2024-5819 Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.45 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes	29 Jun 202409:46	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 24, 2024 to June 30, 2024)	3 Jul 202415:31	–	wordfence

Vulners

Node

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/kadence-blocks/gutenberg-blocks-with-ai-by-kadence-wp-page-builder-features-3245-authenticated-contributor-stored-dom-based-cross-site-scripting-via-html-data-attributes

01 Jul 2024 03:52Current

6Medium risk

Vulners AI Score6

CVSS 3.15.4 - 6.4

EPSS0.00218

SSVC