Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-3692

May 3, 2024, 12:48 p.m.

Product(s) Impacted

WordPress Gutenverse Plugin

before 1.9.1

Gutenverse WordPress plugin

before 1.9.1

Description

The Gutenverse WordPress plugin before 1.9.1 does not validate the htmlTag option in various of its block before outputting it back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Weaknesses

Date

Published: May 3, 2024, 6:15 a.m.

Last Modified: May 3, 2024, 12:48 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

contact@wpscan.com

References

https://wpscan.com/ contact@wpscan.com