CVE-2024-48036 WordPress SKT Blocks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks skt-blocks.This issue affects SKT Blocks: from n/a through = 1.6...

CVE-2024-48036

The CVE-2024-48036 entry concerns the SKT Blocks – Gutenberg based Page Builder WordPress plugin. Affected: SKT Blocks versions 1.6 and earlier. Issue: Improper neutralization of inputs during page generation, resulting in Stored XSS. Impact: Cross-site scripting vulnerability with potential for ...

CVE-2024-48036 WordPress SKT Blocks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks skt-blocks.This issue affects SKT Blocks: from n/a through = 1.6...

WordPress plugin Arkhe Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-32954 · Unknown · Skt Blocks

Name of the Vulnerable Software and Affected Versions: SKT Blocks – Gutenberg based Page Builder versions 1.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which can...

WordPress plugin SKT Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-49270

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hashthemes Smart Blocks smart-blocks allows Stored XSS.This issue affects Smart Blocks: from n/a through = 2.0...

CVE-2024-49270 WordPress Smart Blocks plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hashthemes Smart Blocks smart-blocks allows Stored XSS.This issue affects Smart Blocks: from n/a through = 2.0...

CVE-2024-49270 WordPress Smart Blocks plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HashThemes Smart Blocks allows Stored XSS.This issue affects Smart Blocks: from n/a through 2.0...

CVE-2024-49270

CVE-2024-49270 is a stored XSS vulnerability in the HashThemes Smart Blocks WordPress plugin, affecting versions up to 2.0. The issue arises from improper input neutralization during web page generation. Patchstack and CVE records indicate the fix is in version 2.1. Other connected documents corr...

PT-2024-33409 · Hasthemes · Hashthemes Smart Blocks

Name of the Vulnerable Software and Affected Versions: HashThemes Smart Blocks versions prior to 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, where an attacker can inject...

WordPress plugin Smart Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Smart Blocks plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Smart Blocks versions = 2.0...

WordPress Arkhe Blocks plugin <= 2.23.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Arkhe Blocks versions = 2.23.0...

WordPress Smart Blocks Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Smart Blocks Type Plugin Vulnerable versions = 2.0 Fixed in 2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49270 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fc8a42cfb8ae Credits João Pedro S Alcântara Kinorth Required...

WordPress Arkhe Blocks Plugin <= 2.23.0 is vulnerable to Cross Site Scripting (XSS)

Software Arkhe Blocks Type Plugin Vulnerable versions = 2.23.0 Fixed in 2.27.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49261 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 386d6bb461b6 Credits João Pedro S Alcântara Kinorth Required...

CVE-2024-8760

CVE-2024-8760 covers Stackable – Page Builder Gutenberg Blocks (WordPress) with unauthenticated CSS Injection in versions

btcd 安全漏洞

btcd is an alternative node-wide Bitcoin implementation written in Go golang open-sourced by Bitcoin in Go. A security vulnerability exists in btcd versions 0.10 through 0.24, which stems from a failure to properly reimplement the FindAndDelete functionality of Bitcoin Core, causing the btcd clie...

CVE-2024-9074

The Advanced Blocks Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...

CVE-2024-9074 Advanced Blocks Pro <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

The Advanced Blocks Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...