CVE-2024-13400 Kona Gallery Block <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Kona Gallery Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "Kona: Instagram for Gutenberg" Block, specifically in the "align" attribute, in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2024-13400 Kona Gallery Block <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Kona Gallery Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "Kona: Instagram for Gutenberg" Block, specifically in the "align" attribute, in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2024-13400

CVE-2024-13400 concerns the WordPress plugin Kona Gallery Block (Kona: Instagram for Gutenberg) with stored cross-site scripting in the align attribute of the block, affecting all versions up to and including 1.7. The vulnerability is triggered by authenticated attackers with Contributor-level ac...

PT-2025-2156 · WordPress · Kona Gallery Block

Name of the Vulnerable Software and Affected Versions: Kona Gallery Block plugin for WordPress versions up to, and including, 1.7 Description: The issue is related to Stored Cross-Site Scripting in the "Kona: Instagram for Gutenberg" Block, specifically in the align attribute, due to insufficient...

WordPress plugin Kona Gallery Block 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Responsive Blocks – WordPress Gutenberg Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin Responsive Blocks...

CVE-2024-13400: Improper Neutralization of Input During Web Page Generation

The Kona Gallery Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "Kona: Instagram for Gutenberg" Block, specifically in the "align" attribute, in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possib...

f2fs: fix to do sanity check on node blkaddr in truncate_node()

...

nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint

...

block, bfq: fix bfqq uaf in bfq_limit_depth()

...

ksmbd: fix use-after-free in SMB request handling

...

pmdomain: imx93-blk-ctrl: correct remove path

...

nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint

...

smb: client: fix possible double free in smb2_set_ea()

...

ublk: don't allow user copy for unprivileged device

...

smb: Initialize cfid->tcon before performing network ops

...

The vulnerabilities of the functions blkFlushCompleteSeq() and flushEndIo() in the block component (block/blk-flush.c) of the Linux operating system allow a hacker to trigger a service failure.

The vulnerabilities of the functions blkFlushCompleteSeq and flushEndIo in the block component block/blk-flush.c of the Linux kernel are related to improper initialization. Exploiting these vulnerabilities can allow an attacker to cause a service failure...

Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600105 fixes several issues. The following security issues were fixed: CVE-2024-40921: net: bridge: mst: pass vlan group directly to brmstvlansetstate bsc1227784. CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in brmstsetstate bsc1227781...

The vulnerability of the nbd_disconnect_and_put() function in the /drivers/block/nbd.c component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the nbddisconnectandput function in the /drivers/block/nbd.c component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

USN-7179-4 linux-xilinx-zynqmp vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...