CVE-2024-38712

概要

参考情報

• patchstack.com/database/Wordpress/Plugin/qi-blocks/vulnerability/wordpress-qi-blocks-plugin-1-3-cross-site-scripting-xss-vulnerability
• patchstack.com/database/vulnerability/qi-blocks/wordpress-qi-blocks-plugin-1-3-cross-site-scripting-xss-vulnerability · Third Party Advisory

qi blocks のその他の脆弱性

• CVE-2025-1627中 5.4The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post …
• CVE-2025-1626中 5.4The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Countdown block options before outputting them back in a …
• CVE-2025-1625中 5.4The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Counter block options before outputting them back in a pa…
• CVE-2024-49690高 8.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Qi Blocks qi-b…
• CVE-2024-5221中 5.4The Qi Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file uploader in all versions up to, and in…