Vulnerabilities > CVE-2024-37229 - Unspecified vulnerability in Auburnforest Blogmentor

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

auburnforest

NVD

Published: 2024-07-22

Updated: 2024-11-21

Summary

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AuburnForest Blogmentor – Blog Layouts for Elementor allows Stored XSS.This issue affects Blogmentor – Blog Layouts for Elementor: from n/a through 1.5.

Vulnerable Configurations

Part	Description	Count
Application	Auburnforest Auburnforest Blogmentor - Auburnforest Blogmentor 1.2 Auburnforest Blogmentor 1.3 Auburnforest Blogmentor 1.4 Auburnforest Blogmentor 1.5	5

References

https://patchstack.com/database/vulnerability/blogmentor/wordpress-blogmentor-blog-layouts-for-elementor-plugin-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
https://patchstack.com/database/vulnerability/blogmentor/wordpress-blogmentor-blog-layouts-for-elementor-plugin-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve