CVE-2024-43155

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

6.5MEDIUM

EPSS

0.2%

top 54.10%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Pickplugins Comboblocks

Timeline

PublishedAug 12

Latest updateAug 13

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PickPlugins ComboBlocks allows Stored XSS.This issue affects ComboBlocks: from n/a through 2.2.86.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:LExploitability: 2.3 | Impact: 3.7

Affected Packages1 packages

▶CVEListV5pickplugins/comboblocksn/a — 2.2.86

🔴Vulnerability Details

GHSA

GHSA-7wcw-mh3f-j3v9: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PickPlugins ComboBlocks allows Stored XSS↗2024-08-13

▶

CVEList

WordPress ComboBlocks plugin <= 2.2.86 - Cross Site Scripting (XSS) vulnerability↗2024-08-12

▶