Skip to content
Sign in
6.1 Medium

CVE-2024-4057 The Gutenberg Blocks with AI by Kadence WP WordPress plugin before 3.2.37 does not validate and escape some of its…

Description

The Gutenberg Blocks with AI by Kadence WP WordPress plugin before 3.2.37 does not validate and escape some of its block attributes before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Affected products and versions

Product Affected versions Fixed in
Gutenberg Blocks with AI by Kadence WP 3.2 earliest → < 3.2.37 3.2.37
gutenberg_blocks_with_ai 3.2 earliest → < 3.2.37 3.2.37

Other CVEs of Gutenberg Blocks with AI by Kadence WP

The 3 CVEs of Gutenberg Blocks with AI by Kadence WP →
CVE-2024-10637 The Gutenberg Blocks with AI by Kadence WP WordPress plugin before 3.2.54 does not validate and escape some of its… 5.4 Medium CVE-2024-6884 The Gutenberg Blocks with AI by Kadence WP WordPress plugin before 3.2.39 does not validate and escape some of its… 5.4 Medium
Track this CVE