Not rated
CVE-2021-24546 The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the…
Description
The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Gutenberg Block Editor Toolkit – EditorsKit 1.31 | earliest → < 1.31.6 | 1.31.6 |