Skip to content
Sign in
5.4 Medium

CVE-2024-2369 The Page Builder Gutenberg Blocks WordPress plugin before 3.1.7 does not validate and escape some of its block options…

Description

The Page Builder Gutenberg Blocks WordPress plugin before 3.1.7 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Affected products and versions

Product Affected versions Fixed in
Page Builder Gutenberg Blocks 3.1 earliest → < 3.1.7 3.1.7

Other CVEs of Page Builder Gutenberg Blocks

The 3 CVEs of Page Builder Gutenberg Blocks →
CVE-2024-7132 The Page Builder Gutenberg Blocks WordPress plugin before 3.1.13 does not escape the content of post embed via one of… 4.8 Medium CVE-2024-4260 The Page Builder Gutenberg Blocks WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts… 6.5 Medium
Track this CVE