Genesis Blocks Vulnerabilities

The Genesis Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Sharing block in all versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-lev...

CVSS:

6.4

Affected:

up to 3.1.3

Fixed in:

3.1.4

Disclosed:

Jul 8, 2024

CVE-2024-3563 on NVD →

The Genesis Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pa...

CVSS:

6.4

Affected:

up to 3.1.3

Fixed in:

3.1.4

Disclosed:

Apr 12, 2024

CVE-2024-3901 on NVD →

The Genesis Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the block content in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and above, to inject arbitrary we...

CVSS:

6.4

Affected:

up to 3.1.2

Fixed in:

3.1.3

Disclosed:

Apr 1, 2024

CVE-2024-1946 on NVD →

The Genesis Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the postTitleTag in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and above, to inject arbitrary web...

CVSS:

6.4

Affected:

up to 3.1.2

Fixed in:

3.1.3

Disclosed:

Feb 29, 2024

CVE-2024-2761 on NVD →