CVE-2024-2761: Genesis Blocks < 3.1.3 - Contributor+ Stored XSS
Published Apr 19, 2024
·Updated
The Genesis Blocks WordPress plugin before 3.1.3 does not properly escape data input provided to some of its blocks, allowing using with at least contributor privileges to conduct Stored XSS attacks.
Affected Software
2 affected components
Wpengine Genesis Blocks Wordpress<3.1.3
WordPress Genesis Blocks<3.1.3
Event History
Apr 19, 2024
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
DescriptionWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-2761?
CVE-2024-2761 is rated as a medium severity vulnerability due to the potential for stored XSS attacks.
2
How do I fix CVE-2024-2761?
To fix CVE-2024-2761, update the Genesis Blocks WordPress plugin to version 3.1.3 or later.
3
Who is affected by CVE-2024-2761?
Users with the Genesis Blocks WordPress plugin version prior to 3.1.3 are affected by CVE-2024-2761.
4
What type of attack can be executed through CVE-2024-2761?
CVE-2024-2761 allows attackers with contributor privileges to execute stored XSS attacks.
5
What version of the Genesis Blocks plugin contains the fix for CVE-2024-2761?
Version 3.1.3 of the Genesis Blocks plugin contains the fix for CVE-2024-2761.