CVE-2024-44051: WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Johan van der Wijk Content Blocks (Custom Post Widget) custom-post-widget allows Stored XSS.This issue affects Content Blocks (Custom Post Widget): from n/a through <= 3.3.5.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44051?
CVE-2024-44051 is classified as a critical vulnerability due to its potential for stored cross-site scripting (XSS).
How do I fix CVE-2024-44051?
To remediate CVE-2024-44051, update the Johan van der Wijk Content Blocks plugin to version 3.3.6 or later.
Who is affected by CVE-2024-44051?
CVE-2024-44051 affects users of the Johan van der Wijk Content Blocks plugin versions prior to 3.3.6.
What kind of vulnerability is CVE-2024-44051?
CVE-2024-44051 is an improper neutralization of input during web page generation, leading to a stored cross-site scripting (XSS) vulnerability.
What can attackers do with CVE-2024-44051?
Attackers can exploit CVE-2024-44051 to inject malicious scripts into web pages viewed by users, potentially compromising user data or sessions.