CVE-2024-12045

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maker title value of the Google Maps block in all versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping...

CVE-2024-12045

creationtimestamp| type| source ---|---|--- 2025-01-08 07:20:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113791523838062644 2025-01-08 07:38:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/668 2025-01-08 08:15:45+00:00| seen|...

CVE-2024-12045

CVE-2024-12045 is a stored XSS vulnerability in the Essential Blocks plugin for WordPress, affecting versions up to 5.0.9. The issue arises from insufficient sanitization/escaping of the Google Maps block maker title value, enabling an authenticated attacker with administrator privileges to injec...