CVE-2024-38712

Description

References

• patchstack.com/database/Wordpress/Plugin/qi-blocks/vulnerability/wordpress-qi-blocks-plugin-1-3-cross-site-scripting-xss-vulnerability
• patchstack.com/database/vulnerability/qi-blocks/wordpress-qi-blocks-plugin-1-3-cross-site-scripting-xss-vulnerability · Third Party Advisory

Altre vulnerabilità di qi blocks

• CVE-2025-1627MEDIO 5.4The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post …
• CVE-2025-1626MEDIO 5.4The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Countdown block options before outputting them back in a …
• CVE-2025-1625MEDIO 5.4The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Counter block options before outputting them back in a pa…
• CVE-2024-49690ALTO 8.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Qi Blocks qi-b…
• CVE-2024-5221MEDIO 5.4The Qi Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file uploader in all versions up to, and in…