CVE-2024-6432

The Content Blocks Custom Post Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter within the plugin's shortcode Content Block in all versions up to, and including, 3.3.5 due to insufficient input sanitization and output escaping. This makes it...

CVE-2024-6432

CVE-2024-6432 affects the Content Blocks (Custom Post Widget) WordPress plugin. The issue is a Stored XSS via the content parameter of the plugin’s Content Block shortcode, due to insufficient input sanitization and output escaping. Affected versions are