CVE-2024-38684

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in FunnelKit SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels allows Stored XSS.This issue affects SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels: from n/a throu...

CVE-2024-38684 WordPress SlingBlocks plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in FunnelKit SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels allows Stored XSS.This issue affects SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels: from n/a throu...

CVE-2024-38684

CVE-2024-38684 is a stored XSS in the WordPress plugin SlingBlocks – Gutenberg Blocks by FunnelKit (formerly WooFunnels). The vulnerability affects SlingBlocks – Gutenberg Blocks by FunnelKit: from n/a to version 1.4.1. Root cause is improper input neutralization during web page generation, enabl...

CVE-2024-38684 WordPress SlingBlocks plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in FunnelKit SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels allows Stored XSS.This issue affects SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels: from n/a throu...

CVE-2024-38684: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in FunnelKit SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels allows Stored XSS.This issue affects SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels: from n/a throu...

PT-2024-28128

Name of the Vulnerable Software and Affected Versions SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels versions 1.4.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows...

WordPress SlingBlocks plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SouzaZinn Patchstack Alliance in WordPress Plugin SlingBlocks versions = 1.4.1...

WordPress SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)

Software SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.5.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38684 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5f158ad570d...