CVE-2024-1946 is a Cross-Site Scripting (XSS) vulnerability in the Genesis Blocks WordPress plugin. This vulnerability allows authenticated attackers with contributor access or higher to inject malicious web scripts into WordPress pages. The affected versions are up to and including 3.1.2. The vulnerability stems from insufficient input sanitization and output escaping of block content within the plugin. Although the CVSS score is 0, indicating minimal direct impact, SOCRadar's SVRS of 30 suggests a moderate level of risk. Successful exploitation allows attackers to execute arbitrary code in a user's browser, potentially leading to session hijacking, data theft, or defacement of the website. While not critical, organizations should update the Genesis Blocks plugin to the latest version to mitigate this security risk and prevent potential compromise. The ability for contributors to inject scripts elevates the risk within environments where contributor access is broadly granted.