CVE-2024-10678

The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-10678

The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-10678

creationtimestamp| type| source ---|---|--- 2024-12-13 06:10:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113644024652935047 2024-12-13 08:14:34+00:00| seen| https://t.me/cvedetector/12837...

CVE-2024-10678

The Ultimate Blocks WordPress plugin, in versions prior to 3.2.4 , contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly validate and escape certain block options before they are outputted back into a page or post where the block is embedded. This f...