CVE-2024-2729
Assigner: WPScan
Published: 2024-04-18T05:00:02.373Z
State: PUBLISHED
title: Otter Blocks < 2.6.6 - Contributor+ Stored XSS
problemTypes: descriptions: description: CWE-79 Cross-Site Scripting (XSS)
type: CWE
affected: vendor: Unknown
product: Otter Blocks 
versions: status: affected
versionType: semver
version: 0
lessThan: 2.6.6
defaultStatus: unaffected
descriptions: value: The Otter Blocks  WordPress plugin before 2.6.6 does not properly escape its mainHeadings blocks' attribute before appending it to the final rendered block, allowing contributors to conduct Stored XSS attacks.
credits: value: Dmitrii Ignatyev
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator