Skip to content
Sign in
6.5 Medium

CVE-2024-37948 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PootlePress…

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PootlePress Caxton – Create Pro page layouts in Gutenberg allows Stored XSS.This issue affects Caxton – Create Pro page layouts in Gutenberg: from n/a through 1.30.1.

Affected products and versions

Product Affected versions Fixed in
Caxton – Create Pro page layouts in Gutenberg 1.30 earliest → 1.30.1 No fix stated

Other CVEs of Caxton – Create Pro page layouts in Gutenberg

The 2 CVEs of Caxton – Create Pro page layouts in Gutenberg →
CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium
Track this CVE