Vulnerability Description
The Genesis Blocks WordPress plugin before 3.1.3 does not properly escape data input provided to some of its blocks, allowing using with at least contributor privileges to conduct Stored XSS attacks.
CVSS Score
6.8
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wpengine | Genesis Blocks | < 3.1.3 |
Related Weaknesses (CWE)
References
- https://wpscan.com/vulnerability/e092ccdc-7ea1-4937-97b7-4cdbff5e74e5/ExploitThird Party Advisory
- https://wpscan.com/vulnerability/e092ccdc-7ea1-4937-97b7-4cdbff5e74e5/ExploitThird Party Advisory
FAQ
What is CVE-2024-2761?
CVE-2024-2761 is a vulnerability with a CVSS score of 6.8 (MEDIUM). The Genesis Blocks WordPress plugin before 3.1.3 does not properly escape data input provided to some of its blocks, allowing using with at least contributor privileges to conduct Stored XSS attacks.
How severe is CVE-2024-2761?
CVE-2024-2761 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-2761?
Check the references section above for vendor advisories and patch information. Affected products include: Wpengine Genesis Blocks.