Stored Cross-Site Scripting Vulnerability in Gutenberg Blocks by Kadence WP

CVE-2024-4209

What is CVE-2024-4209?

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress has a vulnerability that allows authenticated attackers, with contributor-level access and higher, to perform Stored Cross-Site Scripting. This vulnerability occurs due to inadequate input sanitization and output escaping of user-supplied attributes within the countdown timer feature. Consequently, attackers can inject malicious web scripts that execute when users visit an affected page, posing significant risks to user data and site integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References