← CVE Intelligence

CVE-2024-2729

Otter Blocks < 2.6.6 - Contributor+ Stored XSS PUBLISHED

Description (CNA)

The Otter Blocks WordPress plugin before 2.6.6 does not properly escape its mainHeadings blocks' attribute before appending it to the final rendered block, allowing contributors to conduct Stored XSS attacks.

Affected (CNA)

Vendor / productVersions
Unknown / Otter Blocks affected 0 before 2.6.6

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.