CVE-2024-38684

CVE-2024-38684 is a stored XSS in the WordPress plugin SlingBlocks – Gutenberg Blocks by FunnelKit (formerly WooFunnels). The vulnerability affects SlingBlocks – Gutenberg Blocks by FunnelKit: from n/a to version 1.4.1. Root cause is improper input neutralization during web page generation, enabl...

WordPress SlingBlocks plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SouzaZinn Patchstack Alliance in WordPress Plugin SlingBlocks versions = 1.4.1...

WordPress SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)

Software SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.5.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38684 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5f158ad570d...