CVE-2024-5595

MEDIUM

Essential Blocks < 4.7.0 - Contributor+ Stored XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-5595 has a selected CVSS score of 5.4 (medium).

Description

The Essential Blocks WordPress plugin before 4.7.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 2, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Essential Blocks

Default status: unaffected

CVE ListBefore 4.7.0affected

essential_blocks

Browse wpdeveloper / essential_blocks

Default status: unknown

CVE ListBefore 4.7.0affected

References

2