Cross site scripting

The GenerateBlocks WordPress plugin before 1.4.0 does not validate the generateblocks/container block's tagName attribute, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

CVE-2021-24751

The CVE-2021-24751 affects the WordPress GenerateBlocks plugin prior to 1.4.0. The vulnerability arises because the generateblocks/container block’s tagName attribute is not validated, which could allow users with a role as low as contributor to perform Cross-Site Scripting (XSS). The issue is a ...

CVE-2021-24751 GenerateBlocks < 1.4.0 - Contributor+ Stored Cross-Site Scripting

The GenerateBlocks WordPress plugin before 1.4.0 does not validate the generateblocks/container block's tagName attribute, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

PT-2021-16252

Name of the Vulnerable Software and Affected Versions: GenerateBlocks WordPress plugin versions prior to 1.4.0 Description: The issue is related to the GenerateBlocks WordPress plugin, where the tagName attribute of the generateblocks/container block is not properly validated. This could allow...

CVE-2021-24751: Improper Neutralization of Input During Web Page Generation

The GenerateBlocks WordPress plugin before 1.4.0 does not validate the generateblocks/container block's tagName attribute, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress GenerateBlocks plugin that stems from a...

WordPress GenerateBlocks plugin <= 1.3.5 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by apple502j in WordPress GenerateBlocks plugin versions = 1.3.5. Solution Update the WordPress GenerateBlocks plugin to the latest available version at least 1.4.0...

GenerateBlocks < 1.4.0 - Contributor+ Stored Cross-Site Scripting

The plugin does not validate the generateblocks/container block's tagName attribute, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks. Add the following code in a post/page while in code editor mode with an Contributor account: Then view/preview th...

GenerateBlocks < 1.4.0 - Contributor+ Stored Cross-Site Scripting

The plugin does not validate the generateblocks/container block's tagName attribute, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks. PoC Add the following code in a post/page while in code editor mode with an Contributor account: Then view/previe...