CVE-2024-2761: medium-severity vulnerability in Genesis Blocks
Genesis Blocks < 3.1.3 - Contributor+ Stored XSS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.8epss 0.7%
The Genesis Blocks WordPress plugin before 3.1.3 does not properly escape data input provided to some of its blocks, allowing using with at least contributor privileges to conduct Stored XSS attacks.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Affected products
Unknown · Genesis BlocksRelated CVEs — Genesis Blocks
In the same product, most dangerous first.