CVE-2024-10484 Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget

🗓️ 03 Dec 2024 05:26:33Reported by WordfenceType

Spectra - WordPress Gutenberg Blocks plugin Stored Cross-Site Scripting vulnerabilit

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2024-10484	3 Dec 202406:15	–	cve
NVD	CVE-2024-10484	3 Dec 202406:15	–	nvd
Cvelist	CVE-2024-10484 Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget	3 Dec 202405:33	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 2, 2024 to December 8, 2024)	12 Dec 202415:38	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3180325/
wordpress	www.wordpress.org/plugins/ultimate-addons-for-gutenberg/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/c218bf5e-b28b-4512-8bc7-7662b4a06f1e

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Dec 2024 05:33Current

5.9Medium risk

Vulners AI Score5.9

CVSS36.4

EPSS0.001

SSVC

CWE-79

cve-2024-10484; spectra; wordpress gutenberg; stored cross-site scripting; authenticated; contributor; input sanitization; output escaping; team widget