4 matches found
CVE-2024-43164
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Blockspare allows Stored XSS.This issue affects Blockspare: from n/a through 3.2.0...
CVE-2024-43164
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Blockspare allows Stored XSS.This issue affects Blockspare: from n/a through 3.2.0...
CVE-2024-43164
CVE-2024-43164 is a Stored XSS in Blockspare (Blockspare: Gutenberg Blocks & Patterns). Affected versions are Blockspare from unknown (n/a) up to 3.2.0. The issue is due to improper input neutralization during web page generation and has a CVSS v3.1 base score of 6.5 (MEDIUM). The Red Hat/Wordfen...
WordPress Blockspare Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)
Software Blockspare Type Plugin Vulnerable versions = 3.2.0 Fixed in 3.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43164 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fe02cb588e95 Credits Ngô Thiên An ancorn from VNPT-VCI Required...