CVE-2024-47385

Summary

CVE-2024-47385 is a newly identified Cross-Site Scripting (XSS) vulnerability affecting WPDeveloper Essential Blocks for Gutenberg. The weakness lies in the improper neutralization of user inputs during webpage generation. An attacker can exploit this stored XSS vulnerability by injecting malicious scripts into the affected application, potentially gaining unauthorized access to user data or taking control of user sessions. The issue impacts versions of Essential Blocks for Gutenberg from n/a through 4.8.4. Users are strongly advised to update to the latest patch or contact their plugin provider for a solution.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.