Aller au contenu
Se connecter
6.4 Moyenne

CVE-2024-3155 The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for…

Description

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 2.2.80 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Produits et versions touchés

Produit Versions touchées Corrigé en
post_grid_combo 2.2 premières → 2.2.80 Pas de correctif indiqué
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks 2.2 premières → 2.2.80 Pas de correctif indiqué
Post Grid 2.2 premières → 2.2.80 Pas de correctif indiqué

Autres CVE de post_grid_combo

Les 3 CVE de post_grid_combo →
CVE-2024-10937 The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress… 5.3 Moyenne CVE-2023-7072 The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all… 7.5 Élevée
Suivre cette CVE