2 matches found
CVE-2024-13549
CVE-2024-13549 affects the WordPress plugin All Bootstrap Blocks. It is a Stored Cross-Site Scripting (XSS) vulnerability in the Accordion widget, exploitable in all versions up to 1.3.26 due to insufficient input sanitization and output escaping. The issue requires at least Contributor-level aut...
CVE-2023-35047
CVE-2023-35047 : Cross-Site Request Forgery in the WordPress plugin All Bootstrap Blocks (AREOI)