CVE-2024-0598: Improper Neutralization of Input During Web Page Generation

The Gutenberg Blocks by Kadence Blocks – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contact form message settings in all versions up to and including 3.2.17 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2024-15679

Name of the Vulnerable Software and Affected Versions The Gutenberg Blocks by Kadence Blocks – Page Builder Features plugin for WordPress versions up to and including 3.2.17 Description The issue is related to Stored Cross-Site Scripting via the contact form message settings due to insufficient...