6.5 Medium

CVE-2024-34573 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pootlepress Pootle…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pootlepress Pootle Pagebuilder – WordPress Page builder allows Stored XSS.This issue affects Pootle Pagebuilder – WordPress Page builder: from n/a through 5.7.1.

Affected products and versions

Product	Affected versions	Fixed in
Pootle Pagebuilder – WordPress Page builder 5.7	earliest → 5.7.1	No fix stated

The 2 CVEs of Pootle Pagebuilder – WordPress Page builder →

CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium

Do you use Pootle Pagebuilder – WordPress Page builder?

Track this CVE Watch Pootle Pagebuilder – WordPress Page builder Check my SBOMs

www.cveye.io/en/cve/CVE-2024-34573

Timeline

Published May 8, 2024
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2024-34573 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pootlepress Pootle…

Description

Affected products and versions

Other CVEs of Pootle Pagebuilder – WordPress Page builder