VULNERABILITY INTELLIGENCE

CVE-2024-2729

CVSS score6.1 MEDIUM
EPSS probability0.42%
CISA KEVNot currently listed
Published2024-04-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

The Otter Blocks WordPress plugin before 2.6.6 does not properly escape its mainHeadings blocks' attribute before appending it to the final rendered block, allowing contributors to conduct Stored XSS attacks.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references