Lucene search

WpvulndbWPVDB-ID:F1A40BAE-F50B-4681-9124-EC097F4FA8E3

HistoryMay 03, 2024 - 12:00 a.m.

Gutenberg Blocks by Kadence Blocks < 3.2.35 - Contributor+ Stored XSS

2024-05-0300:00:00

wpscan.com

gutenberg blocks

kadence blocks

page builder

stored xss

cross-site scripting

contributor

admin

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

EPSS

Percentile

14.0%

JSON

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin

References

www.wordfence.com/threat-intel/vulnerabilities/id/e7fe482e-a4e8-411c-97a4-a32ccf5b3682

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

EPSS

Percentile

14.0%

JSON

Related for WPVDB-ID:F1A40BAE-F50B-4681-9124-EC097F4FA8E3