CVE-2024-9601

creationtimestamp| type| source ---|---|--- 2025-02-14 06:46:59+00:00| seen| https://infosec.exchange/users/cve/statuses/114000895597469528 2025-02-14 07:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4ntfcaem2x 2025-02-14 09:04:00+00:00| seen|...

CVE-2024-9601 Qubely – Advanced Gutenberg Blocks <= 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' and 'UniqueID'

The Qubely – Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ and 'UniqueID' parameter in all versions up to, and including, 1.8.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-9601

CVE-2024-9601 (Qubely – Advanced Gutenberg Blocks, WordPress) is an authenticated Stored Cross-Site Scripting vulnerability in which the attacker, with Contributor-level access or higher, can inject arbitrary scripts via the align and UniqueID parameters. The issue affects all versions up to 1.8....