WordPress Arkhe Blocks plugin <= 2.23.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Arkhe Blocks versions = 2.23.0...

WordPress Arkhe Blocks Plugin <= 2.23.0 is vulnerable to Cross Site Scripting (XSS)

Software Arkhe Blocks Type Plugin Vulnerable versions = 2.23.0 Fixed in 2.27.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49261 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 386d6bb461b6 Credits João Pedro S Alcântara Kinorth Required...

CVE-2024-38675

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in LOOS,Inc. Arkhe Blocks allows Stored XSS.This issue affects Arkhe Blocks: from n/a through 2.22.1...

CVE-2024-38675 WordPress Arkhe Blocks plugin 2.22.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in LOOS,Inc. Arkhe Blocks allows Stored XSS.This issue affects Arkhe Blocks: from n/a through 2.22.1...

CVE-2024-38675

CVE-2024-38675 is an Arkhe Blocks (WordPress) vulnerability: improper input neutralization enabling Stored XSS in Arkhe Blocks versions up to 2.22.1. Exploitation details are not provided in the sources; remediation/fix version is not clearly stated. Patch status in the materials is not definitiv...

CVE-2024-38675 WordPress Arkhe Blocks plugin 2.22.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in LOOS,Inc. Arkhe Blocks allows Stored XSS.This issue affects Arkhe Blocks: from n/a through 2.22.1...

PT-2024-28118 · Unknown · Arkhe Blocks

Name of the Vulnerable Software and Affected Versions: Arkhe Blocks versions 2.22.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versio...

CVE-2024-38675: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in LOOS,Inc. Arkhe Blocks allows Stored XSS.This issue affects Arkhe Blocks: from n/a through 2.22.1...

WordPress Arkhe Blocks plugin 2.22.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Arkhe Blocks versions = 2.22.1...

WordPress Arkhe Blocks Plugin <= 2.22.1 is vulnerable to Cross Site Scripting (XSS)

Software Arkhe Blocks Type Plugin Vulnerable versions = 2.22.1 Fixed in 2.23.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38675 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 12ed6cca89ff Credits Ngô Thiên An ancorn from VNPT-VCI...