Skip to content
Not rated

CVE-2021-24640 The WordPress Slider Block Gutenslider plugin before 5.2.0 does not escape the minWidth attribute of a Gutenburg…

Description

The WordPress Slider Block Gutenslider plugin before 5.2.0 does not escape the minWidth attribute of a Gutenburg block, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks

Affected products and versions

Product Affected versions Fixed in
WordPress Slider Block Gutenslider 5.2 earliest → < 5.2.0 5.2.0
Track this CVE