CVE-2024-8536
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Sep 30, 2024
Updated: Oct 3, 2024
CWE ID 79
Summary
CVE-2024-8536 is a stored cross-site scripting (XSS) vulnerability affecting the Ultimate Blocks WordPress plugin before version 3.2.2. Contribitors and users with higher roles can exploit this weakness by injecting malicious scripts into block attributes. The plugin does not adequately validate or escape these attributes before rendering them on pages or posts, potentially exposing the website to XSS attacks. Unpatched installations are at risk, making it crucial to update the plugin promptly to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.