WordPress Shortcodes Blocks Creator Ultimate plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

CVE-2024-54264

What is CVE-2024-54264?

A vulnerability exists in the Shortcodes Blocks Creator Ultimate plugin developed by César Morillas, allowing for improper neutralization of input during web page generation. This results in a Reflected Cross-site Scripting (XSS) vulnerability, where an attacker can inject malicious scripts into web pages viewed by victims. Affected versions range from earlier releases up to 2.2.0, making it imperative for users to assess their installations and apply necessary security measures to mitigate potential attacks. Regular updates and security practices can help protect against this vulnerability.

References