CVE-2024-47385: WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Stored XSS.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.4.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47385?
CVE-2024-47385 is considered a high severity vulnerability due to its potential for Stored Cross-site Scripting (XSS) attacks.
How do I fix CVE-2024-47385?
To address CVE-2024-47385, users should update the WPDeveloper Essential Blocks for Gutenberg plugin to version 4.8.5 or later.
Which versions are affected by CVE-2024-47385?
CVE-2024-47385 affects WPDeveloper Essential Blocks for Gutenberg versions up to and including 4.8.4.
Is CVE-2024-47385 a client-side vulnerability?
Yes, CVE-2024-47385 is a client-side vulnerability that exploits improper neutralization of input during web page generation.
What type of attack can CVE-2024-47385 enable?
CVE-2024-47385 can enable Stored Cross-site Scripting (XSS) attacks, allowing attackers to inject malicious scripts.