CVE-2024-2729

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p36

Published

Apr 18, 2024 (Apr 18, 2024)

Modified

Jun 17, 2026

Description

The Otter Blocks WordPress plugin before 2.6.6 does not properly escape its mainHeadings blocks' attribute before appending it to the final rendered block, allowing contributors to conduct Stored XSS attacks.

Vendors: themeisle
Products: otter blocks
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.