2 matches found
CVE-2024-11914: Improper Neutralization of Input During Web Page Generation
The Gutenberg Blocks and Page Layouts – Attire Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'attire-blocks/post-carousel' block in all versions up to, and including, 1.9.5 due to insufficient input sanitization and output escaping. This makes it possible for...
6.4CVSS8.6AI score0.0046EPSS
SaveExploits0References1
PT-2024-17344
Name of the Vulnerable Software and Affected Versions Gutenberg Blocks and Page Layouts – Attire Blocks plugin for WordPress versions up to, and including, 1.9.5 Description The issue is related to Stored Cross-Site Scripting via the attire-blocks/post-carousel block due to insufficient input...
6.4CVSS8.5AI score0.0046EPSS
SaveExploits0References7
20