PT-2025-29735 · WordPress · Crocoblock Jetblocks For Elementor

Stealthcopter

·

CVE-2025-53989

·

Publicado

2025-07-16

·

Atualizado

2025-07-16

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Crocoblock JetBlocks For Elementor versions through 1.3.19
Description The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting (XSS). This can potentially allow an attacker to inject malicious scripts into web pages viewed by other users.
Recommendations Update Crocoblock JetBlocks For Elementor to a version later than 1.3.19.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-53989

Produtos afetados

Crocoblock Jetblocks For Elementor