Stored XSS Vulnerability in SKT Blocks - Gutenberg based Page Builder

CVE-2024-48036

What is CVE-2024-48036?

A vulnerability exists in SKT Themes' SKT Blocks – Gutenberg based Page Builder that allows for stored Cross-site Scripting (XSS). This issue arises from improper neutralization of user input during web page generation, which can lead to malicious code injection in webpages. Attackers exploiting this vulnerability can perform actions such as stealing cookies, session tokens, or other sensitive information from users. The affected versions range from an unspecified version up to 1.6, highlighting the need for web admins using this plugin to be vigilant and apply necessary patches to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References