CVE-2024-2761

PoC —

CVSS 3.1

6.8 medium

EPSS

<1%p50

Published

Apr 19, 2024 (Apr 19, 2024)

Modified

Jun 17, 2026

Description

The Genesis Blocks WordPress plugin before 3.1.3 does not properly escape data input provided to some of its blocks, allowing using with at least contributor privileges to conduct Stored XSS attacks.

Vendors: wpengine
Products: genesis blocks
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.