7.1 High

CVE-2024-31365 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themify Post…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themify Post Type Builder (PTB) allows Reflected XSS.This issue affects Post Type Builder (PTB): from n/a before 2.1.1.

Affected products and versions

Product	Affected versions	Fixed in
Post Type Builder (PTB) 2.1	earliest → < 2.1.1	2.1.1

The 2 CVEs of Post Type Builder (PTB) →

CVE-2024-31366 Missing Authorization vulnerability in Themify Post Type Builder (PTB).This issue affects Post Type Builder (PTB):… 7.1 High

Do you use Post Type Builder (PTB)?

Track this CVE Watch Post Type Builder (PTB) Check my SBOMs

www.cveye.io/en/cve/CVE-2024-31365

Timeline

Published April 9, 2024
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2024-31365 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themify Post…

Description

Affected products and versions

Other CVEs of Post Type Builder (PTB)