VULNERABILITY INTELLIGENCE

CVE-2024-2761

CVSS score6.8 MEDIUM
EPSS probability0.66%
CISA KEVNot currently listed
Published2024-04-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

Description

The Genesis Blocks WordPress plugin before 3.1.3 does not properly escape data input provided to some of its blocks, allowing using with at least contributor privileges to conduct Stored XSS attacks.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references