CVE-2024-13549

creationtimestamp| type| source ---|---|--- 2025-01-30 14:17:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoecg53l2w 2025-01-30 14:47:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113917848568461766 2025-01-30 16:46:35+00:00| seen|...

CVE-2024-13549

CVE-2024-13549 affects the WordPress plugin All Bootstrap Blocks. It is a Stored Cross-Site Scripting (XSS) vulnerability in the Accordion widget, exploitable in all versions up to 1.3.26 due to insufficient input sanitization and output escaping. The issue requires at least Contributor-level aut...

CVE-2024-13549 All Bootstrap Blocks <= 1.3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting

The All Bootstrap Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "Accordion" widget in all versions up to, and including, 1.3.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...