Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:genesis_blocks:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductGenesis Blocks (6fdb28b2-8e0b-5405-997d-d7ccb1ac0809)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3901 vulnerable 2026-06-08 06:43:51.782099 Genesis Blocks <= 3.1.3 - Contributor+ Stored XSS
The Genesis Blocks WordPress plugin through 3.1.3 does not properly escape attributes provided to some of its custom blocks, making it possible for users allowed to write posts (like those with the contributor role) to conduct Stored XSS attacks.
Published: 2025-05-15T20:09:44.744Z
Updated: 2025-11-13T21:11:30.236Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2761 vulnerable 2026-06-08 06:35:27.284838 Genesis Blocks < 3.1.3 - Contributor+ Stored XSS
The Genesis Blocks WordPress plugin before 3.1.3 does not properly escape data input provided to some of its blocks, allowing using with at least contributor privileges to conduct Stored XSS attacks.
Published: 2024-04-19T05:00:02.150Z
Updated: 2024-08-01T19:25:41.441Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.