CVE-2024-47736

CVE-2024-47736 relates to the Linux kernel EROFS handling of overlapped pclusters in crafted images. The issue caused a potential task hang/deadlock while waiting on the folio lock during cache I/O, triggered by fuzzed images with overlapping big pclusters. Root causes described include mis-arran...

WordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Qi Blocks versions = 1.3.2...

WordPress Qi Blocks Plugin <= 1.3.2 is vulnerable to Local File Inclusion

Software Qi Blocks Type Plugin Vulnerable versions = 1.3.2 Fixed in 1.3.3 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-49690 Patch priority Low CVSS severity Low 7.5 Developer Qode Interactive PSID a68a3ddba7fc Credits João Pedro S Alcântara Kinorth...

CVE-2024-49261

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryo Arkhe Blocks arkhe-blocks.This issue affects Arkhe Blocks: from n/a through = 2.23.0...

CVE-2024-49261 WordPress Arkhe Blocks plugin <= 2.23.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in LOOS,Inc. Arkhe Blocks allows Stored XSS.This issue affects Arkhe Blocks: from n/a through 2.23.0...

CVE-2024-49261 WordPress Arkhe Blocks plugin <= 2.23.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryo Arkhe Blocks arkhe-blocks.This issue affects Arkhe Blocks: from n/a through = 2.23.0...

CVE-2024-49261

CVE-2024-49261 concerns the WordPress Arkhe Blocks plugin (

CVE-2024-48036

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SKT Themes SKT Blocks – Gutenberg based Page Builder allows Stored XSS.This issue affects SKT Blocks – Gutenberg based Page Builder: from n/a through 1.6...

CVE-2024-48036 WordPress SKT Blocks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks skt-blocks.This issue affects SKT Blocks: from n/a through = 1.6...

CVE-2024-48036 WordPress SKT Blocks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks skt-blocks.This issue affects SKT Blocks: from n/a through = 1.6...

CVE-2024-48036

The CVE-2024-48036 entry concerns the SKT Blocks – Gutenberg based Page Builder WordPress plugin. Affected: SKT Blocks versions 1.6 and earlier. Issue: Improper neutralization of inputs during page generation, resulting in Stored XSS. Impact: Cross-site scripting vulnerability with potential for ...

WordPress plugin Arkhe Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-32954 · Unknown · Skt Blocks

Name of the Vulnerable Software and Affected Versions: SKT Blocks – Gutenberg based Page Builder versions 1.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which can...

WordPress plugin SKT Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-49270

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hashthemes Smart Blocks smart-blocks allows Stored XSS.This issue affects Smart Blocks: from n/a through = 2.0...

CVE-2024-49270 WordPress Smart Blocks plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hashthemes Smart Blocks smart-blocks allows Stored XSS.This issue affects Smart Blocks: from n/a through = 2.0...

CVE-2024-49270 WordPress Smart Blocks plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HashThemes Smart Blocks allows Stored XSS.This issue affects Smart Blocks: from n/a through 2.0...

CVE-2024-49270

CVE-2024-49270 is a stored XSS vulnerability in the HashThemes Smart Blocks WordPress plugin, affecting versions up to 2.0. The issue arises from improper input neutralization during web page generation. Patchstack and CVE records indicate the fix is in version 2.1. Other connected documents corr...

PT-2024-33409 · Hasthemes · Hashthemes Smart Blocks

Name of the Vulnerable Software and Affected Versions: HashThemes Smart Blocks versions prior to 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, where an attacker can inject...

WordPress plugin Smart Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...