Non notée
CVE-2021-24546 The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the…
Description
The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Gutenberg Block Editor Toolkit – EditorsKit 1.31 | premières → < 1.31.6 | 1.31.6 |