Skip to content
Sign in
6.8 Medium

CVE-2024-3901 The Genesis Blocks WordPress plugin through 3.1.3 does not properly escape attributes provided to some of its custom…

Description

The Genesis Blocks WordPress plugin through 3.1.3 does not properly escape attributes provided to some of its custom blocks, making it possible for users allowed to write posts (like those with the contributor role) to conduct Stored XSS attacks.

Affected products and versions

Product Affected versions Fixed in
Genesis Blocks 3.1 earliest → 3.1.3 No fix stated

Other CVEs of Genesis Blocks

The 2 CVEs of Genesis Blocks →
CVE-2024-2761 The Genesis Blocks WordPress plugin before 3.1.3 does not properly escape data input provided to some of its blocks,… 6.8 Medium
Track this CVE