CVE-2024-10678

The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-10678

The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-10678

creationtimestamp| type| source ---|---|--- 2024-12-13 06:10:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113644024652935047 2024-12-13 08:14:34+00:00| seen| https://t.me/cvedetector/12837...

CVE-2024-10678

The Ultimate Blocks WordPress plugin (versions prior to 3.2.4 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to a failure to validate and escape certain block options before they are outputted in a page or post where the block is embedded. This allows users with the contributor role and...