CVE-2024-6346

NVD Published Date: August 01, 2024 at 10:15 AM
NVD Last Modified: August 01, 2024 at 12:42 PM
Download Patch
Vulnerability ID
CVE-2024-6346
Severity
MEDIUM
Severity Score
6.4
Summary
The Gutenberg Blocks, Page Builder – ComboBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the redirectURL parameter of the Date Countdown widget, in all versions up to, and including, 2.2.85a due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
References
Mitigation and Patches
-
Exploits
-
Metasploit Payload
-
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CWE ID
None

Recent Publish

CVE-2024-7357

CVE-2024-2455

2024-07 Mise à jour cumulative pour .NET Framework 3.5 pour et 4.8 pour Windows 10 Version 22H2 pour les systèmes ARM64 (KB5041019)

2024-07 Mise à jour cumulative pour .NET Framework 3.5, 4.8 and 4.8.1 pour Windows 10 Version 22H2 (KB5041019)

2024-07 Mise à jour cumulative de .NET Framework 3.5, 4.8 et 4.8.1 Windows 10 Version 22H2 pour x64 (KB5041019)

2024-07 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11 for x64 (KB5041020)

See SecOps Solution
in action

Schedule Demo
Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions
hello@secopsolution.com
+569-231-213
Compare
Qualys Cloud Agent Tenable Nessus Rapid7 InsightVM
Company
About Us Contact Career
Resources
CVE Windows KB Case Studies eBooks Policy Templates Blog Webinar
Try It
Patch Astra EPSS Calculator Contact Free Scan Schedule Demo Log In
© 2024  SecOps Solution, Inc.| Privacy Policy | Terms and Conditions .
Social Media :