CVE-2024-2761

The Genesis Blocks WordPress plugin (versions prior to 3.1.3 ) is vulnerable to a Stored XSS flaw due to improper escaping of data input in certain blocks. An attacker with at least contributor privileges can exploit this by inserting malicious code into a post using the Code Editor mode, such as...

CVE-2024-3563

The CVE-2024-3563 issue affects the Genesis Blocks WordPress plugin. It enables Stored XSS via the Sharing block in versions up to 3.1.3 due to insufficient input sanitization and output escaping on user-supplied attributes. An attacker with contributor-level access or higher could inject scripts...

CVE-2024-3901

The Genesis Blocks WordPress plugin (versions 3.1.3 and earlier ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the plugin's failure to properly escape attributes provided to some of its custom blocks . This flaw allows users with permissions to write posts, such as those...