CVE-2024-39661

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ExtendThemes Kubio AI Page Builder.This issue affects Kubio AI Page Builder: from n/a through 2.2.4...

CVE-2024-39661

CVE-2024-39661 affects Kubio AI Page Builder (WordPress) up to version 2.2.4. Root cause: Improper input neutralization during web page generation, enabling authenticated XSS. Impact is limited to the ability to inject scripts in generated pages; CVSS v3.1 base score 6.5 (Medium). Remediation: Pa...