PT-2024-24296

Name of the Vulnerable Software and Affected Versions Blocksy Companion versions 2.0.28 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability in CreativeThemes Blocksy Companion. This type of vulnerability allows an attacker to trick a user into performing unintende...

CVE-2024-31932: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CreativeThemes Blocksy Companion.This issue affects Blocksy Companion: from n/a through 2.0.28...

CVE-2023-23898

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in CreativeThemes Blocksy Companion plugin = 1.8.67 versions...

CVE-2023-23898

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in CreativeThemes Blocksy Companion plugin = 1.8.67 versions...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in CreativeThemes Blocksy Companion plugin = 1.8.67 versions...

CVE-2023-23898

CVE-2023-23898 is a stored XSS in the CreativeThemes Blocksy Companion WordPress plugin up to version 1.8.67. The root cause is improper escaping/validation of the class attribute in the blocksy_posts shortcode output, exploitable by users with Contributor+ permissions. Impact is stored XSS; CVSS...

PT-2023-19288 · Creativethemes · Blocksy Companion

Name of the Vulnerable Software and Affected Versions: CreativeThemes Blocksy Companion plugin versions prior to 1.8.68 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with contributor or higher permissions. Recommendations: For CreativeTheme...