CVE Database /
CVE-2023-6486
CVE · Medium
CVE-2023-6486 — Spectra Legacy – Gutenberg Blocks [ultimate-addons-for-gutenberg] < 2.10.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-6486
|
Spectra Legacy – Gutenberg Blocks [ultimate-addons-for-gutenberg] < 2.10.4 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 2.10.4
|
2.10.4 |
2024-04-03 |
—
|
CVE-2023-6486
The Spectra Legacy – Gutenberg Blocks plugin before version 2.10.4 contains a cross-site scripting (XSS) vulnerability that was discovered by Akbar Kustirama. An attacker could exploit this flaw to inject malicious scripts into a website, potentially executing redirects, advertisements, or other HTML content when visitors access the site. This security issue has been resolved in version 2.10.4 and users should upgrade to that version or later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings