How severe is CVE-2024-35731?

Medium severity. CVSS v3 base score is 6.5 out of 10.

XSS in Wp Moose Kenta Gutenberg Blocks Responsive And Block Templates Library For Editor

CVE-2024-35731

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Moose Kenta Gutenberg Blocks Responsive Blocks and block templates library for Gutenberg Editor allows Stored XSS.This issue affects Kenta Gutenberg Blocks Responsive Blocks and block templates library for Gutenberg Editor: from n/a through 1.3.9.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (19.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L.

Affected products

Wp Moose Kenta Gutenberg Blocks Responsive And Block Templates Library For Editor — versions n/a
Wpmoose Kenta_blocks

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

audit@patchstack.com (Third Party Advisory, vdb-entry)

Frequently asked questions

What is CVE-2024-35731?: CVE-2024-35731 is a medium-severity vulnerability in Wp Moose Kenta Gutenberg Blocks Responsive And Block Templates Library For Editor, classified under Cross-site Scripting. CVSS score: 6.5/10. Published 2024-06-08.
How severe is CVE-2024-35731?: Medium severity. CVSS v3 base score is 6.5 out of 10.