CVE-2024-37948 WordPress Caxton – Create Pro page layouts in Gutenberg plugin <= 1.30.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PootlePress Caxton – Create Pro page layouts in Gutenberg allows Stored XSS.This issue affects Caxton – Create Pro page layouts in Gutenberg: from n/a through 1.30.1...

CVE-2024-37948

CVE-2024-37948 is a Stored XSS in Caxton – Create Pro page layouts in Gutenberg (WordPress plugin). The issue arises from improper neutralization of input during web page generation, affecting Caxton versions up to and including 1.30.1. Root cause details in public advisories identify Stored XSS ...