Cross-Site Scripting Vulnerability in Premium Blocks for WordPress by Leap13

CVE-2024-56245

What is CVE-2024-56245?

A Cross-Site Scripting (XSS) vulnerability has been identified in the Premium Blocks – Gutenberg Blocks for WordPress provided by Leap13. This vulnerability arises from improper neutralization of input during web page generation, leading to the potential for stored XSS attacks. This issue impacts versions from n/a up to and including 2.1.42. Attackers can exploit this weakness to inject malicious scripts, compromising the security of websites that utilize these blocks. Website administrators using the affected versions are encouraged to apply appropriate patches and maintain elevated security measures to mitigate any risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References